last executing test programs: 12.015709241s ago: executing program 4 (id=948): r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x7840d000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x5, 0x2) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f0000001d00)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x4, 0x0, 0x0, 0xbff, 0x1e, 0x0, 0x23, 0x6e}) syz_usb_connect$cdc_ecm(0x5, 0x1e7, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1d5, 0x1, 0x1, 0x7, 0x0, 0x4, "", [{{0x9, 0x4, 0x0, 0x8, 0x3, 0x2, 0x6, 0x0, 0x28, {{0x8, 0x24, 0x6, 0x0, 0x0, '1) '}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0x200, 0x8, 0x3, 0x5}, [@mdlm_detail={0xb2, 0x24, 0x13, 0x9, "cc7008bc6a190763ed66be51cd292d17bb4372c2ef9214757181607d1184510cb4eaf5c2d86f55675e39e56fe38b2063802bffdb6f4fcd42df861a191774f270ae46279950416bf43bda631be0c986e83a6635b6dd3f6624d94340eb44bb63265f75157c6a8d09fd9723b48f1a61a59bdde0356fac720754ead8f441fb84bb8ebf9bd26679005a3f1aba848f78411620db570dad3979b92e9beeb4f4035afe2755b6ba3e654ae63987c0b93268fa"}, @mdlm_detail={0xdc, 0x24, 0x13, 0x7, "3fce4cd21876ad24c8dd362d11f65d11a904cc843324d8a2195da96f26d3b0e33bdb3ddf208ca5e0f9fbb0e2ba924aa7314286d9d0753eafee79726468fffda4a43a51ee685a5a1f5a30a91d40ca32a3486ebbde689dd9b4a145dff65a53ddbf143cd3a250a8869d227fab36b67d0302e85a385f33de908ad3dc270ef07876d103aa7258f6d4e2a904aa589b37f9734de04eaed50df6e67687019b0191749f35987f2b007fa7ffc260d871d7bb03740d98055d5f93a24c85817ae3cb634cc971334033e2311154e9306497867a41f47a9c66f7c9e877d6e1"}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x10, 0x7, 0x3, 0x1}}], {{0x9, 0x5, 0x82, 0x2, 0x40, 0x4, 0xc, 0x6}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x1, 0x9, 0x95}}}}}]}}]}}, &(0x7f0000000340)={0xa, &(0x7f0000000200)={0xa, 0x6, 0x201, 0x3, 0x3, 0x0, 0xff, 0x1c}, 0x38, &(0x7f0000000240)={0x5, 0xf, 0x38, 0x3, [@wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0xd, 0x4, 0x1ff, 0x1}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "88b886b3ba82081a7221eb7ddef28917"}, @ss_container_id={0x14, 0x10, 0x4, 0xf2, "0f01f98626f93c9c3a69895441af4bdf"}]}, 0x1, [{0x96, &(0x7f0000000280)=@string={0x96, 0x3, "846eba180631b7eca50af755a44b903cd5da4761abfb29b3e68fbd051b98d88c9b57d0f929acbfbb05d29b606acf78e68ef9826fe4e4ae0070763cbb3bb9b328ab18b0166e5174d514304007d64884d300b67f0e3edbe885279f862438cbb19dc882e2f1f520dbd27394d33a2a274046bfbe1ad85770857f2d2bba20b0098b2ccefbafe4bee02e1238eedcc4c8ffdc109dc0b5b1"}}]}) 11.808509989s ago: executing program 3 (id=949): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000029000)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x80) bind$packet(r1, &(0x7f0000000180)={0x11, 0x2, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) getsockname$packet(r1, &(0x7f00000015c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000700)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3800000054000147880000000000000007008209", @ANYRES32=r4, @ANYBLOB="20000100", @ANYRES32=r6, @ANYBLOB="00001000e000030000010001000000000000000008"], 0x38}}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 11.560005074s ago: executing program 3 (id=950): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x0, 0x20000000) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x9) r4 = dup(r3) r5 = open(&(0x7f0000000040)='./file1\x00', 0x1850c2, 0x14c) ftruncate(r5, 0x200004) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r6, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x805}, 0x0) r8 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4b4, 0xde61, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x20, 0x2, "", [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0xb, 0x10, 0x1, {0x22, 0x29}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x0, 0x4}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r8, 0x0, 0x0) syz_usb_control_io(r8, &(0x7f0000000400)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) sendfile(r4, r5, 0x0, 0x80001d00c0d1) r9 = dup(0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r9, 0x2000) write$binfmt_aout(r9, 0x0, 0xffffffdb) r10 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x30, r10, 0x300, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x14, 0x18, {0x3, @bearer=@udp='udp:syz2\x00'}}}, ["", "", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x44040}, 0x20040001) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 9.293420595s ago: executing program 4 (id=957): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/bus/input/devices\x00', 0x0, 0x0) poll(&(0x7f00000000c0)=[{r2, 0x9088}, {r0, 0x455a}, {0xffffffffffffffff, 0x600}], 0x3, 0x6) r3 = syz_open_dev$audion(&(0x7f00000003c0), 0x3, 0x54000) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)={0x20, 0x40, 0x107, 0x70bd2b, 0x25dfdbfe, {0x3, 0x7c}, [@nested={0xc, 0x1c2, 0x0, 0x1, [@typed={0x8, 0xa, 0x0, 0x0, @binary="f1d966c6"}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000) r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d3e457201e040b40e73e000000010902120001000000000904"], 0x0) r5 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x458, 0x0) ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(r2, 0x4068aea3, &(0x7f0000000400)={0xa8, 0x0, 0x2}) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r5, 0xc10c5541, &(0x7f0000000040)) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io$printer(r4, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000002c0)={'bridge0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x3c, 0x24, 0x10, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0x1d}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x0, 0x4}}}]}, 0x3c}}, 0x4000010) sendmmsg$inet(r6, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) syz_usb_control_io$printer(r4, &(0x7f0000000180)={0xc, &(0x7f0000000080)=ANY=[@ANYBLOB="40031c0000001c07d3c4e74e7c7149f82023698503f4055d786d315f3053888f803a"], 0x0}, &(0x7f0000000380)={0x1c, &(0x7f0000000200)={0x20, 0xa, 0x1a, "49b45a8cfec549979f9350afcba5689c24a8b5c43f2ddde13810"}, &(0x7f0000000240)={0x0, 0xa, 0x1, 0x72}, &(0x7f0000000280)={0x0, 0x8, 0x1}, &(0x7f00000002c0)={0x20, 0x0, 0x2}, &(0x7f0000000300)={0x20, 0x1, 0x1, 0x1}, &(0x7f0000000340)={0x20, 0x0, 0x1, 0xff}}) r9 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f00000001c0)="c744240077dd0000c74424027fbe0000c7442406000000000f011c24b8010000000f01c1450f01ca470f01f866baf80cb8e4f61882ef66bafc0c66b8795966ef40250000000066b8de000f00d02e0f005ffa0f01c92e640fc71f", 0x5a}], 0x1, 0xe8, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r0, r9, &(0x7f0000002000/0x18000)=nil, 0x0, 0x0, 0x10, 0x0, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x2000000) ioctl$KVM_RUN(r9, 0xae80, 0x0) syz_usbip_server_init(0x6) syz_usbip_server_init(0x5) 8.625319631s ago: executing program 0 (id=958): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$nl_generic(0x10, 0x3, 0x10) socket(0x400000000010, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x400000000010, 0x3, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/rt_acct\x00') r4 = socket(0x2, 0xa, 0x0) sendfile(r4, r3, 0x0, 0x8) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r5) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r6) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x106}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) read$FUSE(r3, &(0x7f000000b040)={0x2020}, 0x2020) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x14, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2}}}]}, 0x38}}, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r3, 0xc00864bf, &(0x7f0000000000)={0x0, 0x1}) openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1, 0x100007, 0x4, 0x6d23, 0x1, 0xffffffffffffffff, 0x400000}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240), &(0x7f0000000240), 0x2000cc0, r9}, 0x38) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r10, 0x26, &(0x7f0000000000)={0x1}) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r11, 0x26, &(0x7f0000000000)={0x1, 0x0, 0x40000000, 0x6}) 8.336378691s ago: executing program 3 (id=960): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x8, &(0x7f0000000140)=0x8730, 0x4) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x200000000000011, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000029000)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x80) bind$packet(r2, &(0x7f0000000180)={0x11, 0x2, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) getsockname$packet(r2, &(0x7f00000015c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) accept4$tipc(r2, &(0x7f0000000080)=@name, &(0x7f0000000100)=0x10, 0x80000) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000700)={'ip6gre0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3800000054000147880000000000000007008209", @ANYRES32=r5, @ANYBLOB="20000100", @ANYRES32=r7, @ANYBLOB="00001000e000030000010001000000000000000008"], 0x38}}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 8.111714889s ago: executing program 3 (id=961): syz_usb_connect(0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x8001}, 0x8) getsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000001340)={@dev, @local, @broadcast}, &(0x7f0000001380)=0xc) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$bt_hci(r4, 0x84, 0x7f, &(0x7f0000000080)=""/4057, &(0x7f0000000000)=0xfd9) r5 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000001300), 0x4) ioctl$SNDCTL_DSP_SPEED(r5, 0xc0045002, &(0x7f0000000080)=0xf7e) read$dsp(r5, &(0x7f00000002c0)=""/4096, 0xfffffffffffffd87) write$FUSE_LSEEK(0xffffffffffffffff, &(0x7f0000003d00)={0x18, 0x0, 0x0, {0x8001}}, 0x18) write$dsp(r3, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, 0x0) r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000001a40)=@raw={'raw\x00', 0x8, 0x3, 0x224, 0x0, 0xe138, 0x198, 0x0, 0x198, 0x278, 0x358, 0x358, 0x278, 0x358, 0x3, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, 'netdevsim0\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24, '\x00', 0x4}}}}, 0x280) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f0000000300)=@generic={0x3, 0x1, 0x3}) dup(r7) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) 7.498669748s ago: executing program 0 (id=962): sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0x1, &(0x7f0000000180)=ANY=[@ANYBLOB="85864260929a00000000000000000000400061d5165220f146dbe87c444870e992903ae3a0b93ae622d259a7a42868fbfb5266d5e95bef28e3c9fd368e8542d98b201aa042c8675f21bde27ee563afcb72c99d305318b1daca000000f5f27e9e67c0921ad8eda690decfdfa0f827dc35614f325d554fb0d107d67ceb98f6bdf3987f6746d6bc9e3cf0a679dc6a194d98fc5f626e65b12fb17fc56cd946e13902ac55a2bf413717fb"], 0xfffffffffffffffe}, 0x90) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) r2 = syz_open_dev$sg(&(0x7f00000004c0), 0x0, 0x20c02) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000040)="aefdda9d240303005a90f57f07703aeff0f64eb9ee07962c220a2e11b44e65d76641cb010852f426072a", 0x2a}], 0x1) read(r2, &(0x7f0000001400)=""/4076, 0xfffffeea) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x17) msgget$private(0x0, 0x4a0) r3 = syz_open_dev$sndctrl(&(0x7f00000012c0), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r3, 0xc2c45512, &(0x7f0000000a00)={{0x5, 0x0, 0x0, 0x8, 'syz1\x00'}, 0x0, [0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10008, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x800, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) r4 = memfd_create(&(0x7f00000001c0)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1cs1F59\xcdR\xc1\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00\xc1\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9usy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9b\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa\xe7\xd6\xa3\x00'/706, 0x6) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x2012, r4, 0x0) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f00001cd000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x9, &(0x7f00000021c0)=[{0x2000000000000009, 0xffffffff, 0x1}], 0x1, 0xc2ff, 0x0, 0x0, 0x0, 0x76}) syz_usb_connect(0x0, 0x24, 0x0, 0x0) 7.401687142s ago: executing program 1 (id=963): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001840), r0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000580)=ANY=[@ANYRESHEX=r2, @ANYRES8=r1, @ANYRESOCT=r2], 0x20}, 0x1, 0x0, 0x0, 0x4842}, 0x20008001) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$unix(0x1, 0x2, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010428bd7000fddbdf250700000000006392a89f6e0597e0", @ANYBLOB], 0x50}, 0x1, 0x0, 0x0, 0x91}, 0x24044884) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000480)={0x64, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x64}}, 0x0) close(r7) socket$inet_sctp(0x2, 0x1, 0x84) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r9 = syz_open_procfs$namespace(0x0, 0x0) open_by_handle_at(r9, &(0x7f0000000000)=@FILEID_NILFS_WITHOUT_PARENT={0x20, 0xf1, {0x1, 0xffffffff20000000, 0x105, 0xfffffff8, 0x4}}, 0x0) r10 = openat$rfkill(0xffffffffffffff9c, 0x0, 0x801, 0x0) write$rfkill(r10, 0x0, 0x0) r11 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, 0x0) sendmsg$nl_route(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x210}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x12}]}}}]}, 0x38}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000001880)={'wlan1\x00'}) socket$alg(0x26, 0x5, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(r1, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYBLOB="8c00000038750266f44134f60778c57931e11c4ecb727e4df776acfb4c7f79bb54846e70ad01dc4925254e426c565382546ac37769f839f713ee4fea107e95e246c5b2b2dbd5f18f8fbcedfdab0105564ddf2c53130479f4c327ccbb7fcdb3ea7b9b51d283d516ca945fc291cff905862ca5e586cec15a4bbc2d98eeb4243710a798a4dc02f34f09a2394358583d259840838f44d9f21ca61ee6981fb1a6d8bab0585db0a2", @ANYRES16=r2, @ANYBLOB="000328bd7000fbdbdf25170000000c009900090000005e0000000a00060008021100000000000a00060008021100000100000a001a0008021100000000000a001a00ffffffffffff00000a001a0008021100000000000a000600ffffffffffff00000a001a00ffffffffffff00000a001a0008021100000100000a001a000802110000000000"], 0x8c}, 0x1, 0x0, 0x0, 0x40}, 0x0) syz_open_dev$video4linux(&(0x7f0000000000), 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x2, 0x3, 0xff) 7.002735785s ago: executing program 4 (id=964): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab1204000000000000010902240001b30000040904410c17ff5d810009050f1f05e13f000009058303"], 0x0) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x3b, &(0x7f0000000000)=ANY=[]) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000340)=@newqdisc={0x24, 0x28, 0x400, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, 0x0, {0xffff, 0xe}, {0xb, 0xffff}, {0x2, 0x1}}}, 0x24}}, 0x44001) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a0b040000000000000000020000004c000480240001800b000100736f636b657400001400028008000240000000070800014000000002240001800b00010065787468647200084068aefbd79ef1400000001508000640000000020900010073797a30000000000900020073797a32"], 0xa0}, 0x1, 0x0, 0x0, 0x4000040}, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000040)=[0x0], 0x1}) r4 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r4, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r4, 0x200) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) syz_usb_connect(0x5, 0x27, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000b75c7f40470501026411010203010902120001000000000904"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40500000006000700000000039500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0x3, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r6 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r7 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r7, 0x40085112, &(0x7f0000000080)=@echo=0x7) syz_usb_connect$uac2(0x3, 0xf4, &(0x7f0000000340)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0xff, 0x194f, 0x10c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xe2, 0x3, 0x1, 0x8, 0x40, 0x81, {0x8, 0xb, 0x0, 0x2, 0x1, 0x9, 0x20, 0x87}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x2, 0x2, 0x18, 0x1}, [@feature_unit={0x7, 0x24, 0x6, 0x4, 0x5, [0x2]}, @source_unit={0x8, 0x24, 0xa, 0x9, 0x3, 0x0, 0x80, 0x1}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0x6, 0x1, 0x1, 0x81, "c77e4f", "a2c9"}, @format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0x4, 0x8, 0x3, '68'}, @format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x22e9, 0x341, 0x3}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x0, 0x6}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x62, 0xc, 0x8, {0x8, 0x25, 0x1, 0x80, 0x3, 0x4, 0xa}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x6, 0x62, 0x6, 0x5, 0x2f}, @as_header={0x10, 0x24, 0x1, 0x4, 0x0, 0x3, 0x5, 0xcd, 0x1, 0x7}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x800, 0xef46, 0x40, 0x9}, @as_header={0x10, 0x24, 0x1, 0x7, 0x5, 0x1, 0x3, 0x8, 0x1, 0x9}, @as_header={0x10, 0x24, 0x1, 0x4, 0x3, 0x3, 0x1002, 0xc8, 0xf2d, 0x7}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x1, 0x4, 0x9, {0x8, 0x25, 0x1, 0x80, 0x30, 0x5, 0x2}}}}}}}}]}}, &(0x7f0000000640)={0xa, &(0x7f0000000440)={0xa, 0x6, 0x0, 0x81, 0x5, 0x8, 0x8, 0x7}, 0x6f, &(0x7f0000000680)=ANY=[@ANYBLOB="050f6f10050b10010805000f060001070a10030202000908060024100000000000000ff0050030ffff00003fff00000000000000ff00003f00000f00ff0003100b2e100affce290b0014f32160da49c42630122ef0a1e6c2f5f092fe05c8d17c4c766a96f4a24ab886a2f4d34523130e77e372111d6b229a0df09e940b5b"], 0x4, [{0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x827}}, {0x5c, &(0x7f0000000540)=ANY=[@ANYBLOB="5c03f7f846fcecb7694e11782391f0a02da7ad4b7a8c6a65ed782540d2d51b5b05102971a9fd05e9891a73ab8c3a0630bc0799bd953f13754f35dfae33f6437747ef60301d55f37dfa945a14bac3df04ba84de6f97ad000000000000"]}, {0x2, &(0x7f00000005c0)=@string={0x2}}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x424}}]}) write$UHID_CREATE2(r6, 0x0, 0x119) r8 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) ioctl$I2C_RDWR(r8, 0x707, &(0x7f0000000100)={&(0x7f0000000000)=[{0xee, 0x4a11, 0x0, 0x0}], 0x1}) socket(0x23, 0x6, 0x3) syz_usb_connect$midi(0x3, 0xe7, &(0x7f0000000140)={{0x12, 0x1, 0x351, 0x0, 0x0, 0x0, 0x0, 0x582, 0xc, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xd5, 0x1, 0x1, 0x2, 0x90, 0xff, "", {{{0x9, 0x4, 0x0, 0x0, 0x6, 0x1, 0x3, 0x0, 0x7, [@ms_header={0x7, 0x24, 0x1, 0x5, 0x7}, @midi_in_jack={0x6, 0x24, 0x2, 0x5, 0x2, 0x7}, @ms_header={0x7, 0x24, 0x1, 0x85, 0x7}, @midi_out_jack={0x17, 0x24, 0x3, 0x3, 0x4, 0x8, [{0x4, 0xff}, {0x9, 0x8}, {0xb}, {0x4, 0xec}, {0x4, 0xf2}, {0x7f, 0x42}, {0x7, 0xfd}, {0x2, 0x5}], 0xd8}, @midi_out_jack={0x7, 0x24, 0x3, 0x3, 0x4, 0x0, [], 0x81}, @ms_header={0x7, 0x24, 0x1, 0x3, 0x7}, @ms_header={0x7, 0x24, 0x1, 0x5, 0x7}, @midi_out_jack={0x9, 0x24, 0x3, 0x3, 0x7, 0x1, [{0x5, 0x71}], 0x7}], [{{0x9, 0x5, 0x6, 0xc, 0x200, 0x0, 0x80, 0xaf, {0xe, 0x25, 0x1, 0xa, "b026680fa56b4508ca66"}}}, {{0x9, 0x5, 0xa, 0x0, 0x3ff, 0x8, 0x80, 0x0, {0xd, 0x25, 0x1, 0x9, "0d43a6f58fe89e2c77"}}}, {{0x9, 0x5, 0x7, 0x0, 0x200, 0x4, 0x4, 0x5, {0x10, 0x25, 0x1, 0xc, "0e65aac847a067114235b3a3"}}}, {{0x9, 0x5, 0xb, 0x0, 0x8, 0xe4, 0x8, 0x5, {0x5, 0x25, 0x1, 0x1, '~'}}}, {{0x9, 0x5, 0x6, 0x8, 0x400, 0x72, 0x81, 0x6, {0xb, 0x25, 0x1, 0x7, "821d413d3a13cd"}}}, {{0x9, 0x5, 0xd, 0x10, 0x200, 0x2, 0x0, 0x5c, {0x9, 0x25, 0x1, 0x5, "23ca7eec48"}}}]}}}}}]}}, &(0x7f0000000300)={0xa, &(0x7f0000003a80)={0xa, 0x6, 0x310, 0x38, 0x8, 0x5, 0x20, 0x2}, 0x2f, &(0x7f0000000280)={0x5, 0xf, 0x2f, 0x2, [@ssp_cap={0x20, 0x10, 0xa, 0x5, 0x5, 0x5, 0xff00, 0x3ff, [0xff00c0, 0x30, 0xc000, 0x0, 0x3f0f]}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x3, 0x0, 0x40}]}, 0x1, [{0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x4c6d}}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f00000002c0)=ANY=[@ANYBLOB="b7020000f7ffffffbfa70000000000002502000020feffff7a0af0fff8ffffff69a4f0ff00000000b70600000018d1fe5d6405000000000075040000000d00000701000000000000b70400001000e5207b0700fe0000000085000000b5000000b70000000a00000095000000000000006458c2c62fc206000000f909a63796c113a80c19aab9d60700ffffffff483be3f0d3253730e78000000062c28b22756bedf3cf393d14c46cc4f79fd2b316da4f0de8163f6242fa7323f1740637c48468766aeb39439fce41f144631ac262dcae08c3d1a1fbe96dd87235b44174f7c013700e69274f8e9c31975e551558055dc2dc29edc33b375fa325dcf3e91e20f63d7030dbe7ff7f51fe89c3d17cf45a1616ad237682057034dfdc81f5a53cd640212c88e8b687a2446049577c75b76b775c1e301caf2465ed4b2ad56b848d046c52bfc3737127120ab17d82a294d174f240a3cdc725cfe6e839a1f80f59486578e45b008d39ab618f660e3c53ed4409aa92ae4fecd913060ca74ed8a303e22de12087a217d8d7be0ae1117cc791313b1318497dd5ebeef0d7e1795a6ff20f699870ebb137cffa79465da52ab2b3430ba0ba59152496a1ea5dd1e4dee46f6d3688603b5f25a588a31da4e481884074e211dd09a8b8039d0834507656ed7d552a990c1354d7638b2c2215dd9f606b01a92fabc6eb6fa033a86f8920e2168a80d7c86da5ad1d27c8d2a180e56046a49b989128ea736894d3eef8dca16ed63520be4654ddb14bfe4268c487c5a75c044e21021c089608c50adbc4e3f4c6a4ca86c7d2df5bc7c76e413d05e8f57b1e22d4af34f9d4d2e6e4d4f57f47aebdd5f98f67834c656b2fe09df4a1b15116fceaa404a6df278c7c629f584ba8d37c1137c2263ae02ad3718a03a886eb"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x139}, 0x48) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) 6.947709958s ago: executing program 1 (id=965): socket(0x2b, 0x80801, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0xa, 0x300) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = socket$inet6(0xa, 0x3, 0x3c) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a000007080002400000000209"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x5000, 0x80000001, @remote, 0x7}, 0x1c) writev(r1, &(0x7f00000000c0)=[{0x0}], 0x1) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r6, &(0x7f0000000100)="f257a8ea7bc273dfaeab968586dd", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @link_local}, 0x14) write$tun(r3, &(0x7f0000000240)={@val={0x0, 0x86dd}, @val={0x0, 0x1, 0x11, 0x4, 0x0, 0xca6}, @mpls={[], @ipv6=@generic={0x1, 0x6, "11b712", 0xe, 0x11, 0xff, @local, @private1, {[], "edac99e59c7b644049a480fdc35c"}}}}, 0x44) socket$nl_route(0x10, 0x3, 0x0) 5.366194768s ago: executing program 2 (id=967): r0 = openat$vmci(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(r0, 0x7a4, &(0x7f0000000080)={{@any, 0x8}, 0x9d19, 0x1, 0x8, 0x10}) r1 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r2, 0x5452, &(0x7f0000b28000)=0x3) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0xd5e855c9ff29405c}) r4 = socket(0x400000000010, 0x3, 0x0) write(r4, &(0x7f0000000040)="3a03000019002551075c0165ff0ffc02802000030011000500e1000c0400070080000300", 0x33a) read(0xffffffffffffffff, &(0x7f0000000740)=""/384, 0x200008ca) ioctl$DVB_DEMUX_DMX_GET_PES_PIDS(0xffffffffffffffff, 0x800a6f2f, &(0x7f0000000440)) fcntl$setsig(r2, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r3}], 0x2c, 0xffffffffffbffff8) tkill(r1, 0x14) dup2(r2, r3) fcntl$setown(r2, 0x8, r1) tkill(r1, 0x13) r5 = gettid() rt_sigqueueinfo(r5, 0x21, &(0x7f0000002d00)={0x0, 0x0, 0xffffffff}) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/tracing', 0x0, 0x0) lseek(r6, 0x22, 0x0) kcmp$KCMP_EPOLL_TFD(r1, r5, 0x7, 0xffffffffffffffff, &(0x7f0000000400)={r6, 0xffffffffffffffff, 0x7fffffff}) writev(r0, &(0x7f00000015c0)=[{&(0x7f00000004c0)="73e59731adb4690bb126edaf0a5dd6b1a4ef6de62afe5229970c2c0241a21b6b32b652d0b446b00f8d88dcd6c8bb782548d832ecbc774085b3dcfd72f5c07db5a339cb04bf16519949d8767a65c4444f0cd28b43ee21369f89cdf565fc0ef0b1a22c1067cdafbbd79e21eba65833d8ada461305f5843a3efb0ae8c3187dbb70a4bdffdb2809974ef8eab9ea0d272c70bfe8f7cacdd83a4299677807b192d30739b7957c14abf656461c8a2195d250d5b2adc030752abb561543e9f69ba8331b60135b54fab615217918f806a55f4f4735885dd17b7ea12abffc3bb4b86cdae3fb2618604dbb460d151de60a183b8da4275a21aa6fb14e7a0a8473eede484f4e5bfaec535d7e0a53b62cd9cc6a1f2a8b148a0819032db9eacdde6b47c8aeb384172d4b2ddf7de8c6e040d5c03db34e68bf05a3ed8bfda5b71550295a65a39135da4d1d41cacce4a25f54d0bebc95946e55bf9c300b7375f7d994b3f8277983bf8c8552db17ecab0b9efbb80fee0015b5f809bd99f81ff0a877b4eec98873f54ab316b5fe9c86ea915cc9affc2ea848449a3f181a22d9056db00e2d7085b44cbe6628891ee14f3469b70425c40024ae0fc37c1c5ebac80e7c9e875183777984a9c119753993be149b6d018cca2f02cb3e4398201b9230479f5aec2ad0c903203195020ffca68b06a1df1864f83a7c4381e749291223ebf164e34cb1a594122d966b81e3ca6cf09b9a04eeda5d0f54607800b7202062f46fea50b306670f03e7fce40fd40fb5f23a7207026f77f5169a60afcec3d92e30c3b06577e3c99b79bcc723d4d30ca97fca6392688b4af94f6d49782659aa68fcf808ac86eba69029d3bbacaf22a71b5204310a387fb4adf4d4ae0e7363c57afd1f348c51bbec2a1fc6c8d15d36c8ee5320e97105825b554ff659c8364571c6109f45df2ca0cf583673928826ff541b87e2a9fb3775d3dcc9f93d8b8eecc80104b93cf6966a7594ff3fc83284728929a685885ead41c716b5045effe41f7acdddfd0f9655d49547da837fec43635825298f407a04c62807f573d02a8cdccdd4e0dda0195720169b0d737d498cb54dce2a4237717d7e5777e4e7d0342bb268f51846a0ddfee575f5427fc09b6c0c2ad67815e8f348b9bbc65e5b1d7531e15f8e672cfa7e32c717e4d00a8596c83f0194644de8ce4b71fbf5291dd411557f32bdf7e9d4e816575993388dc9445489a7286350ae25765345b5bab4f835a4c835c4c53cd20f758048635188ebdb4991333363c3ff756221f9af788885de854ab2b6841a4649aa5fe80ee685c096d588003ebab2ee9aafdb6d54ec94c94214670ad7918fcc4ebf2f9d4d607975c2ee59f4a4ac104828bea65885baa527c1f01e6aa92a5efd4d3d76da4b1bffb775a5e2bbf1a86f59d94641f34d802f1daef46d96212a873f5ea7855bec54b3d9f8b3abbe1d094a84a44f2b304b391d46e955db7005dc96d0ced300f5d10c9eb8e9b955561709a3b3b26ac90478c070b368cb779e6b2e1760d51e2972bee68fe02f853e87ea8508fc12d33af1842851f1debfda62fd85d921358fe1160e12bf7955f52fdc335991eec3c27356bdf3b09e706484ec9b885da1513bed52599db798f809b48e380f4733d46efd856efdc238ba9f12bf7407242977592bbd735c3fac5aa181e42280e7bcbec4e559376c300df6e08ff0fd36c36f7576567b873898317874bb725cebc29a04ce63cd92120e87e936a3d4f1c3e09ca9e49ac0684c73868508b8fccdda13dff2cf88cc1a3165c7fdcb17a8dc80fe3e767a159a29b122a734ae58792e03d48276c47b5225d5923f68e57bbcc2c646412b0ec4b02f7af15fcb6bef05168b54e58e10aa17bad56b8e9d0924232414194a09870000eefc305cf6cc139cb7ea7e9175ab46317822b6ba7cfc530378b835224332f9c60f0795ab7e93fda88d4fbd5aaea3e768faf5f2e3a5186e14f489fa6feda93878992dc44bfa8c8f6b54b17150fa0af7a3b0a4bb2cdad96932e554f9b576ab86d255697358f0f9a0a723b1eff274f95510e691305101c9e44fec1c55dfc3062e7881b53574527097a8545dd4f8d5c8cc0c363c20dde640ba704789bdd21f8506d72f1b0dd9c18a69d738b5b355fecbee3a38e0d2421bcfbb7f80d8105d7a52b787a2a0020cad85cb56638f7f88ee51d76a86be8a74bbaba9200aadc02331a651c8b29f5b551dc2da2068d30e7effc1574a6ad492c34fd9c6882f7588a222f4eae533ba9cd1247fc525db936de2905b7a4d810e19ef41545244c74f29cd38faf722862c0cbf6e18ba601cb34ce9616e63350f2c4e8ef14a04037514108c2dafa9b86599aeec9d0a6e751ea83daccaa6bdb13909e12d07622afa997c22467f238db69a4094eab2096143c7fe510c98b1ad0afab75b5218db5cae2cfce31582560f5333961a865621a617997e0b1992465cec6c4243b5e8e75d3330b1ff2634c32b15a9edd528e79acee27f8ecd92410d1a75c4e143c868d449ddde5cef3abf2a895196689d2cf39da3ddf06894cf225fabeef3e2adf8fd2d76c88d36eef4ff34dd5ea32ef002f9671e060bdd47c4e1a563e3dac127448bc197cbe4496fa8539a81cf96ee6b17cbf8d6946243457b71bbb1051699729aac4c2891a6c9c1e46ca5f5a40ea3a55e9d99dd8048abc1a081b45d1d08186b75a4e9d57d26530467f8262e82a0007c09ead04f2a9ed9f99e9cc7c7549dc1184bf5c12d929937f24733caa79cbd7966d7e92b0ed2d5080d97e1b554f5d950fb11d7051ce9fbfd10a43f8277ac129052c9e61673d9edea4781c969cf0a493689bfaeb4369aa193dde8b2dabef60a208e4e326852b1e4a202f9312c66ebca651aa00240ddb4377934343dd7ef6fdf484a44c2097b6d9fbe4f5424043b6ff2c6b9aef6d7dd9fea464867c540d83da42957006984d5db16622fc4cdcb41039ac3fcd653a3e7558fc9bf5759f87c930ee89ae8cef598d081a7af6e7441d4bab0693076d78768577c7290bfde394363a528a6201067a29c212642b03634107c62892850fa36c9d83e18cef346e37d1fbc537d89387f0a3e5034c1f4295f70995742d3bbe3b1687e90178c2c8377acfb0f2aa24ccbbae6f925f71a82a2be18389ad768a83c4b6fd6220ed54692e8e7db21e610692a916529ad48e6820292b776d8512f5413ea19e8fdfe66753163122493f82326ba0d395542df40a88f609bf7ffeb5d95b05d52ec2e06f8721cbed3012c6f4fccb9738495a28875cce5dae2ea273a9a53102ea7a86a72d3d1ba33577f060d5d0fc0acff770de55feaae222d447ff7ef3fe7c6b8068d15986487f8d0eaf16fecd471228666e45d5bf064646e317452b0f3bd08d3773d60d25e88fda36b134d9624048b5558c00141b31f7a2837464311934d97203fd3001b41e50392b39b529c11c8184cd5b575eda0a8bac757d0d398094ad04aee77cfdd258ebb1f0787b26a9fb4ba55cab1d592fdd8448cc39481c54e98f44c9db2e7db7728a85216ec3025f64209dbb871e3af670af005eff38d5bb542f01e8b8ca1b0dea831256787446b1a346304a8c2f79d034cf8c7afe5bc4418e7e79fc28d35267473270d596156c336b0cf3037f43baeea3771b4bc52277126c1c65d8092b33cb55f6d86f57a8a04707994089592b2049d3b793da0b58fbcfbc40737910aebde12c55d2837650e3611a83a78acb8900ec980fed4ab500c1fff154ed6cde0189199d843d44d89ce97730d387663358cb50662c46d9621dcec9d0be21b4faf08691703e7b7cc60ad438b2813724691f2d4d90d26173d779838efb5bf7dcc9f64dd47a9154dc6406bbc56fee3a0cc96172e41775365cf70b82932272d11c24d529561271ba821ec3aa1e5a63b806db405a811bb3914b4a00491103d1be209d130e6e64a780fb243611684244d3e6eb05e95ea2e18da7cba5b005ecb9cd194c04f14108ae9f3d6da97f90fc3ded0c5c9a7b7d9228b6f9820ca0f0f8210955246c98231c31f4cd6a26280abb826fffad979354f5816e45f56a9de186a838cf683f92735f04dadc1a8d8a67708fd6c8a704b945d8351451822c293f67f0b16a6a3a1022b8863fff10a9fd8c96299e4795665e58764bb2e0b781411a7a1b4d0e0e6095e7f39ca4363938eecbd3a0b5929350ef31739312c37b44fed3b51d029ff5c2a676cc1ee11189d646caa023c265229eb6531bc0756c218f16f796fd26ade3d7875b74f1ace891d06dc3dcd8c85e1d38f15a4eb4f52fe650dddff7cd66b537ddf478d255dfcb0173c16692879e1977fcee18f9111dfd095db6a51647f3ba62e9d8424954d20523f14eac5191167837a534cfc6507bd88589fd691f4006c93bda52ee07184a24bd846c051195dc90745e6208d21d90f4063fe17d3abc6b28c9c8a57ed707d7e6ba3c1b4027b7f3c4fee110c643eb7fd838dece18e5ea8bff9bfa6b0178480aab67ef5f944b5af431ae2528b399d3d2052187bb69a9fb02a773c831b34e4fba0a8957c948b4baa4a63a2eaa689e8776af8e3507aa0c4719c64150321b86451689135fa618565da8cd29f6af3f86b96897114bd6371f8e8fa067abb753d859044d080b0747ca1e635906af27ed87baca0f0560993e82fe8cc24fa4c96199c931bc39bb898f612ef2d0d5652a844b34c8b7448402bcc28a646710c5d068a94ded8104c52326945054bd1cd5ceefb880b1c910a685701e22ae3a4e60fb464081d29a9c30a758ccd847e209955b6da29964942407966fd6cfb579a382ccc7af5318b42a17a824c20da3572db326475f65afa38b6a4108faf5d040c8f0231875e329ed81b86fca56d3f6e79a1777fe2a2e428db808df58b654b0189d464945e58ea13c2b499177ec18faaf3f071c2635bd94b07426394ff1ec890de6cca2096d7863913c189c7839e20fc1cbfa960a509b9799b53c9f0d0908c71307391867c5c6b978400ed76c61bdd52506c6032e9e8b39bccf49268163182d72ba9b961b892cf10447f32c6dde389120123ed53df4ac8cad00378e3eac63cee8927bdbf7a22d45528d8a4fa3e084ef8605c618ec291eb90f101abcba23bafe3794a43143e16468429a7e696149e681cb733fbb49fb36b0b9ea79109f26338e7ebffe0d2ec381656508e66d29f774e92d76919ac6d8cd502212e1bdbe6bb5c8064105f6709c326ad294da179299116e08e5fdbfea68f1bbaf777f218e0b5c9d31c1ec067e1674530011240ef1ee92e42476004e1b627682a87c0dc7cb345840c477e586f32e0da44fec90676007e5b188eff793e5f5ed519c6f0b318262c5e2abbb37fb0e535b46ff8815d0ea67fd39763830edb23b98cbda00fc788167636549ed387a527d5996c2139892da3c07bf67a0640434a200db7f394f9e38b4f8fed27144595b830b369f0da750e59b5530f7df41ba61b10ac4579d63c26f3170245732bd19f1452e6cc21a176287d9861304e6bc91b9fdab746ea333bceb60d5a9d06f3da054132df2e974740871ce180363e3ea8259638b39a9ea0ba230b35bdcf9f246fa4414c64e55e73507510fc073e4dc10f5aef04dfb7b79194b35b5484cbc68e143006b3b8b58df1fd7ed67523fa7c61d5aa8187a097707a794e4c0a40c88a643c8fe6e7b2aadbf243189d9d7b06e779e2ce559ddb030b92d986255d7257a78130f09c81fdad354ded5875658ac7cc23335263d96e8ff08686e873e1816d7bc8176d240dcd4f7249274659a6213a550095faf1012090ae94de884c6c615a534426e71ad06911898d6c7d71a", 0x1000}, {&(0x7f00000014c0)="cd084faaf71ba4ecdbacb459ed63683831f8a980286a83056575d0232d07952a1d36ebb87c7fea3b0c4099c5a006f8cea07cd81be5efb0bb62cfa09b23f1f6bc0f447b95019fdaf32102b2b5d49c0196dfbfe12586a8ddc7343aaf82b4a3e1e2bf0b322363ced55e70a4f02a0b0df708880d53d613588f95f9e37b941c3614bffb232b3f361bf476d1efbefe21f5d1fea5d44c1d2a7de0115e75d08b59aad2821a410aa0cbbf9d3c8e7de39d3fa1ddf1746e0ec917c3b0440ad1bf3273c4e00b7737fd78fa84ce5253", 0xc9}], 0x2) r7 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_FREQUENCY(r7, 0x402c5639, 0x0) ioctl$VIDIOC_S_STD(r7, 0x40085618, &(0x7f0000000480)=0x1000) 5.336854878s ago: executing program 1 (id=968): syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x8, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000008300), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000002100)=ANY=[@ANYBLOB, @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r0, &(0x7f00000021c0), 0x2000, &(0x7f00000041c0)={&(0x7f0000000080)={0x50, 0x0, 0x0, {0x7, 0x29, 0x7, 0x12510421, 0x3, 0xc, 0x1, 0x56, 0x0, 0x0, 0x2, 0x9cea}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000008340)="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", 0x2000, &(0x7f0000000f80)={&(0x7f00000003c0)={0x50, 0xffffffffffffffda, 0x5, {0x7, 0x2d, 0x800003, 0x4404002, 0xfbfb, 0x0, 0x0, 0x1008000, 0x0, 0x0, 0x2, 0xa4}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setxattr$system_posix_acl(&(0x7f0000000100)='./file0\x00', &(0x7f0000000040)='system.posix_acl_default\x00', 0x0, 0x0, 0x2) setxattr$system_posix_acl(&(0x7f0000000140)='./file0\x00', &(0x7f0000002b80)='system.posix_acl_access\x00', 0x0, 0x0, 0x3) 5.082830775s ago: executing program 2 (id=969): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$nl_generic(0x10, 0x3, 0x10) socket(0x400000000010, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x400000000010, 0x3, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/rt_acct\x00') r2 = socket(0x2, 0xa, 0x0) sendfile(r2, r1, 0x0, 0x8) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r3) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x106}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 4.871988617s ago: executing program 2 (id=970): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000180)={'gretap0\x00', &(0x7f0000000100)={'gretap0\x00', 0x0, 0x8000, 0x20, 0x9, 0x6, {{0x5, 0x4, 0x2, 0xe, 0x14, 0x64, 0x0, 0x6, 0x29, 0x0, @private=0xa010100, @private=0xa010102}}}}) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x18, &(0x7f0000000000)=0xc, 0x4) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvtap0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000100), 0xfffffffffffffeda, 0x400c885, &(0x7f00000003c0)={0x11, 0x11, r2, 0x1, 0xe8, 0x6, @random="c0f424a1f50d"}, 0x14) 4.829591977s ago: executing program 0 (id=971): connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @multicast2}, 0x2, 0x0, 0x4}}, 0x2e) syz_usb_connect(0x5, 0x239, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e388d640697a01006ba8010203010902270201020010000904"], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000180), 0x1, 0x402) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="03", 0x1}], 0x1) 4.769217904s ago: executing program 2 (id=972): r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket(0x2, 0x3, 0xff) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x70, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x96}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x89}]}}}, {0x38, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_XOR={0x4}, @NFTA_BITWISE_MASK={0x8, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x10c}}, 0x0) ioctl$XFS_IOC_GETBMAPX(r0, 0xc0205838, &(0x7f0000000280)={0x6, 0xd, 0x8, 0xaf8a, 0x2, 0x10}) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000380)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000340)={0xffffffffffffffff}, 0x111, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000300), r4, 0x0, 0x1, 0x4}}, 0x20) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000080), 0x62}, {&(0x7f0000000100)="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", 0x682c}, {&(0x7f0000001480)="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", 0x1001}], 0x3) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000180)=@framed={{0x18, 0x8}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r5}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$AUTOFS_DEV_IOCTL_FAIL(r6, 0xc0189377, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r1, {0xa, 0x8}}, './file0\x00'}) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0) poll(&(0x7f00000003c0)=[{r8, 0xd091}], 0x1, 0xfffffffc) r9 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r9, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_MFC_PROXY(r9, 0x0, 0xd2, &(0x7f0000000040)={@remote, @multicast2, 0x1, "0596232642d17c7dc02cd9f90c8dd705b8dd6dadcd9a1c8ddffa4da80fbf040d", 0x7c, 0x8, 0x100, 0x3}, 0x3c) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)={0x18, 0x0, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x20040000}, 0x4000) r10 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000380)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r10, &(0x7f0000000240)={0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="00000c000000eaff01"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r10, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r10, 0x0, &(0x7f0000001200)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r10, 0x0, &(0x7f00000008c0)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x0, 0x4, {0x20, 0x10}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000240)={r6, r7, 0x35, 0x0, @val=@netkit={@void, @value=r6}}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x8, &(0x7f0000000000)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r5}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000bde5a44070275290f515010203010902120001000000000904"], 0x0) syz_usb_control_io$sierra_net(r11, 0x0, 0x0) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0x1, @empty, 'ip6tnl0\x00'}}, 0x1e) ioctl$PPPIOCSMRU(r0, 0x40047452, &(0x7f00000000c0)=0x9a) 4.612436882s ago: executing program 4 (id=973): syz_emit_ethernet(0x79, &(0x7f00000006c0)={@broadcast, @random="6c7621d7cc94", @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "fec000", 0x3f, 0x3a, 0x0, @private0, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "18b088", 0x0, 0x0, 0x0, @empty, @private1, [@hopopts={0x11}], "fafb17c133d11e"}}}}}}}, 0x0) 4.51316149s ago: executing program 4 (id=974): setitimer(0x1, &(0x7f0000000080)={{0x0, 0x2710}, {0x0, 0xea60}}, 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) mkdir(&(0x7f0000000140)='./control\x00', 0x111) close(r0) r1 = inotify_init1(0x800) fcntl$setstatus(r0, 0x4, 0x2c00) fcntl$setown(r0, 0x8, 0x0) fcntl$setsig(r1, 0xa, 0xe) inotify_add_watch(r0, &(0x7f00000000c0)='./control\x00', 0x40000d1d) r2 = fcntl$getown(r1, 0x9) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @tid=r2}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r3 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r3, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_DEL(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000840)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="0100f100fddbdf255400000008000300030000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x8010}, 0x8000) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000480)={&(0x7f0000000540)=ANY=[@ANYBLOB="1c010000", @ANYRES16=r6, @ANYBLOB="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"], 0x11c}, 0x1, 0x0, 0x0, 0x24004000}, 0x4000) fsetxattr$system_posix_acl(r4, &(0x7f0000000000)='system.posix_acl_access\x00', 0x0, 0x0, 0x1) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) rmdir(0x0) 4.349064299s ago: executing program 1 (id=975): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001840), r0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000580)=ANY=[@ANYRESHEX=r2, @ANYRES8=r1, @ANYRESOCT=r2], 0x20}, 0x1, 0x0, 0x0, 0x4842}, 0x20008001) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$unix(0x1, 0x2, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010428bd7000fddbdf250700000000006392a89f6e0597e0", @ANYBLOB], 0x50}, 0x1, 0x0, 0x0, 0x91}, 0x24044884) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000480)={0x64, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x64}}, 0x0) close(r7) socket$inet_sctp(0x2, 0x1, 0x84) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r9 = syz_open_procfs$namespace(0x0, 0x0) open_by_handle_at(r9, &(0x7f0000000000)=@FILEID_NILFS_WITHOUT_PARENT={0x20, 0xf1, {0x1, 0xffffffff20000000, 0x105, 0xfffffff8, 0x4}}, 0x0) r10 = openat$rfkill(0xffffffffffffff9c, 0x0, 0x801, 0x0) write$rfkill(r10, 0x0, 0x0) r11 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, 0x0) sendmsg$nl_route(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x210}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x12}]}}}]}, 0x38}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000001880)={'wlan1\x00'}) socket$alg(0x26, 0x5, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(r1, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYBLOB="8c00000038750266f44134f60778c57931e11c4ecb727e4df776acfb4c7f79bb54846e70ad01dc4925254e426c565382546ac37769f839f713ee4fea107e95e246c5b2b2dbd5f18f8fbcedfdab0105564ddf2c53130479f4c327ccbb7fcdb3ea7b9b51d283d516ca945fc291cff905862ca5e586cec15a4bbc2d98eeb4243710a798a4dc02f34f09a2394358583d259840838f44d9f21ca61ee6981fb1a6d8bab0585db0a2", @ANYRES16=r2, @ANYBLOB="000328bd7000fbdbdf25170000000c009900090000005e0000000a00060008021100000000000a00060008021100000100000a001a0008021100000000000a001a00ffffffffffff00000a001a0008021100000000000a000600ffffffffffff00000a001a00ffffffffffff00000a001a0008021100000100000a001a000802110000000000"], 0x8c}, 0x1, 0x0, 0x0, 0x40}, 0x0) syz_open_dev$video4linux(&(0x7f0000000000), 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x2, 0x3, 0xff) 3.994403766s ago: executing program 1 (id=976): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x48) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0x0, 0xffffffff}, 0x0) r2 = userfaultfd(0x80801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x749}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) madvise(&(0x7f0000c0c000/0x1000)=nil, 0x1000, 0x4) munmap(&(0x7f0000800000/0x800000)=nil, 0x800000) readv(r2, &(0x7f0000000280)=[{&(0x7f0000000300)=""/80, 0x50}, {0x0}], 0x2) syz_open_dev$vim2m(&(0x7f0000000200), 0x3, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x88440, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r5, 0x4020aeb2, &(0x7f0000000300)={0x300, 0x12c, @ioapic={0x30000, 0x65, 0x8, 0x6, 0x0, [{0x2, 0x6, 0x4, '\x00', 0x4}, {0x81, 0x5, 0xa6, '\x00', 0x3}, {0xf0, 0x5, 0x9, '\x00', 0x4}, {0x2, 0x81, 0xb, '\x00', 0x8}, {0xc0, 0x0, 0x5, '\x00', 0x3}, {0x7, 0x9, 0x41, '\x00', 0xa6}, {0x0, 0x4, 0x3, '\x00', 0x2}, {0x6, 0x18, 0x7, '\x00', 0x4}, {0xb6, 0x7, 0x6, '\x00', 0x40}, {0x40, 0xb, 0xff, '\x00', 0x9}, {0x1, 0x8, 0x2, '\x00', 0x3}, {0x40, 0xf1, 0x5, '\x00', 0x4}, {0x5, 0xf, 0x1, '\x00', 0xf}, {0x5, 0x2, 0xfa, '\x00', 0xc}, {0x1, 0x57, 0x4, '\x00', 0x5}, {0xff, 0x6, 0x6, '\x00', 0x2}, {0x0, 0x8, 0x6, '\x00', 0xc7}, {0x5, 0x3, 0x9, '\x00', 0xa}, {0x1, 0x1, 0x7, '\x00', 0x6}, {0xcb, 0x61, 0xfe, '\x00', 0x2}, {0x83, 0x9, 0x53, '\x00', 0x9}, {0x4, 0xa, 0x40, '\x00', 0x8}, {0x7, 0xbf, 0x2, '\x00', 0xff}, {0x9, 0xff, 0x2, '\x00', 0x4}]}}) r6 = socket$kcm(0x10, 0x2, 0x4) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0xf, &(0x7f00000005c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) unshare(0x22020400) r9 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000340), 0x3e2682, 0x0) fdatasync(r9) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f00000000c0)=r8, 0x4) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x320, &(0x7f0000000180)=[{&(0x7f0000000340)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f1400000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec001210000140090c0c00bdad446b9bbc7a46e39882a5dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1, 0x0, 0x0, 0xff0f0000}, 0x0) r10 = syz_genetlink_get_family_id$tipc(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, r10, 0x1, 0x70bd2d, 0x25dfdbfc}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x880) 3.141526274s ago: executing program 0 (id=977): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="4c0000006d00673c2bbd7000ffdadf2500000000", @ANYBLOB="0110040004e8020018003480140035006d6163766c616eff00000000000000001400030076657468315f746f5f626f6e64"], 0x4c}, 0x1, 0x0, 0x0, 0x8004}, 0x0) 2.715757125s ago: executing program 0 (id=978): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="440000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008001b000000000004001a80180002"], 0x44}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) close_range(r2, r2, 0x2) r4 = socket(0x11, 0x800000003, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f00000002c0)=0x800, 0x4) timer_create(0x5, &(0x7f0000000840)={0x0, 0xd, 0x1}, &(0x7f0000000880)=0x0) timer_gettime(r6, &(0x7f00000008c0)) bind$unix(r5, &(0x7f00000000c0)=@abs={0x1, 0x5c}, 0x6e) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x0, &(0x7f0000000100)}) close_range(r7, 0xffffffffffffffff, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r4, 0x894b, &(0x7f0000000280)) bind$packet(r4, &(0x7f0000000d00)={0x11, 0x8, r3, 0x1, 0x6}, 0x14) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000080)={0x4, 0x2}, 0x4) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000002880), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_HARDIF(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x14, r9, 0x711, 0x70bd2a, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x28008000}, 0x40000) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r4, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r9, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4044051) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r10, 0x84, 0x1, &(0x7f0000000140)={0x0, 0x8, 0x6, 0x181, 0x7, 0x10000}, &(0x7f0000000180)=0x14) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fdd411efc40800040000000000000000", 0x39}], 0x1) socketpair(0x5, 0x800, 0xf5, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$xdp(r11, &(0x7f0000001d80)={&(0x7f0000000380)={0x2c, 0x2, r3, 0x3c}, 0x10, &(0x7f0000001d40)=[{&(0x7f0000000440)="24c724979f8447d8e59ea9512c60d3dcffcee1583bfdab5a7b60c5072c695b5623f8dd504329c4fd44ab5f4953e41c80c703817f980b3859c941f5ce49946a0b781353a202b34a84144ddd2ad8ce3b795cc2b35147802805d53d28b289bf08677462aa51a8e453e235b76dcd7a4d037a47e7efccf834c360d40838dcbe02cf213eac9bba8835dc4c7d52410954cc3e29cc57262296c87c8a0b309fdfe84215f27c38e7cecc88e13b", 0xa8}, {&(0x7f0000000500)="6fdae1110b927106e57f65befe8d5a64194f4e2072462cfef815d8af5f496ce7f62c440114d6e776deb5cc66be82a8fd35432d37310b81195d9fc04fb2c711868c49", 0x42}, {&(0x7f0000000580)="cb9be70f07b4807048da65d6181dd3b640103e2d1e42b8", 0x17}, {&(0x7f00000005c0)="133326b5e32e36b54b8895722d163ec34e616626c1284364cd22970333dba3305ac35998aa7abfe9582e846529651df7660293170f7112079bf01756536ec2a6ba703dad4fb57f8424596e212a02b4b0389853ac242c78689d8faa90986d16bcae03bfeb538ac0683e8366b7e5d9fc5bb7de1cb5d616ac25a8c7b60441b2568b9fb3d7af34e63502745b8b336aa9311c99c0d0d6caf80fdcab9e8547261428861e0f1398d9ad58535367671d0d0bdbc96b3467d605578a9fe44d81033350ff69", 0xc0}, {&(0x7f0000000700)="2d620e2c795789f43a64ddd71d54fb141095618bb6f3b7087bd6fd930b56e4bf131e2400b5ae97cb6947f9389e9d8d8eff814fc3ac097758591be429c58b0da5667790ff09ad51e8e0101b83b3605621f562e9abf4c5e9a30214164b243c1fd224ad875661611c597b51d36e2d8a91e872c466b3141347054ec45a210390ead4a139f5b31b25787c64734e0d61d1ad407a56737da41bc3ddb6fa0fa05e0165f8278923fa5ac1d88d55eb14cddbc4da6c1b4176839db981ac2bb42a845ca50bc338369d192ea541d2ef5d0af44c59e94742baacf988a4760ed6b77ff70e47718e0c5027bbc2", 0xe5}, {&(0x7f0000000800)="ae4cfc525139a7cf1c004d1002a5fb4cbb0043c34996e5826b504d3e7a6cdd", 0x1f}, {&(0x7f0000000d40)="0858384620cab54ea0bac834dfbfd087e12f1927a8c8523a62b9b1d889808506e22e33eb3f26d5069a5ce8847b20ada5e8a37b0e776ea00b13c0c99189dd1758a93f8ddfda5cc6d8bebdfd01c22a98405a876ba98d9b230a39d121d37ab60ac197be485a804d0a56b9096fbf00dca92e19e5f4b9d382778a90019a241afb85bf0d3487daa908a7587a06f24843ba34d51d0e2094f86323a98c28c82cb1360acc39d3efbf688bba4fcd88c87d58dcc0318f44279f1d7317950060dbcb3de7d690d121eb5e3822d2aa48a5b41ebc97265d20b1aebc979796f739311de1139839d86c2f2fa69b1eb238c98f5952d884b81b62b90054f99222a7c0b54e850bb23194fd9f7b28b39b5881fd73e64223e1c3f7bb94f8eb1ecfff9b83a32e23c0132a7ab8fec8d9f77f924b493e64505ed1a79a2e694c42ffd800835eeeaf50ec982db881b10eb0764d74f796b3a516138c11675813a156c507bed405381587f5fd8e751778dc66be9e318595efc4d9dbf68c0754a2152d1a946b2e576eb8078a6a24a267b8828148d303c74d3d0b127c741769e8d3bf94800f7f385783b4433124cb5059d06f77b6edc50d5481eeb2cfb44b21175d100f928c3942a52fe9e5d6d42e949fbcceb98890387d48157423d08cac31b2d5b2d633da5bc85d63ca2d9b200b756b81825cfc12ed0a74dd4de1bfc9934879ca31959fc2a7d633235132df2e6fcce93e7ddbc114d4982a5d6ed03237675c19594586ebecd1f69b2b182715123fceeb07eee2336089ac950c48a53297cba971c6453a6803d0b9070c6c586f0d1da3ec7fa2f4111bd84d936193ab9ca799717cca47f432e19ec1351120839958f019c09059c1217b565f8ecd6df546c6846fa4309f852e10d8933e47c74e5960fd6f35878d5453ef9a068b3ff33327370f0c46e2c6f9efe8de178817ce94f094ccc1a876b39af146e83ef65585766dc96426d7c47afd13daf8fede75546968d975e2df5fb7905c9ce2f24b15efeac27f0248799376a23b001ac87fe3398e1f554bb96639af5bdfdb32d5cf50ac0ee7d0f629848b167bc01fbb7a333d09fe17ca95cc1b698a99215912755efca1aa0ea05fff1011dd9b4ed8a9d5f90629acb809c7387d05b87ea8be96199c4f4ad5bf3b705f7f9ac38579ca58c3ddb3ed5b3e6b6f37d9a16de1581b3c9949605e45dc28287f5dedd49b8633c29803e2e79f5ece3c9610f8f3fb8f8a629b341c5343645d4fabadb97c77912116da03bdf12e0870403c6d6d0a9704c15b22d2a298261f01fb2bd881ca8c2c5373f9f43b90dfcc54f091bd54923c4763e074cb2d2ee12101fb24d449cd78a2b01bed760bdd7b74fb3f7b9eb32b389b445f8deda34e2f5ff4e0c984f58cd224c8cb3961031c7a55e6226900fb15bf753fc768058af6b60336bf348d26ce2f6b5e148a598393dd32b3204ff9f303cc68852c0ffb21efd9b263ebac2a2b791c265a9cb8a448e1777e3d34ffbcdfca652b8756f2ea6d29fa38643a7a0d2fdcec580487f47d677de6f6cab0dbe002f7bf9766d5cda02a94ac24d1b3e9010b360da300f26fbd9b923e734cf412bddbc995b05bccedf672b319d6c52a56f0557edfe76081fdc74c446855a32b3ab39b9bb0d81acdabe64b6223c5d31ab103b3a7729bd57b622e3ffb07333da5e7ab7b75dca804a1075a87e62c8665c66d5c0549c41ee6251585ebb0c73a111abcb52d0beef3f80fa9bbe4012341f86be4ac3e38594973d79dd5b5f2a8905c6416511249e0c1bfce5679543743b265f3684cc7f505a853574f80d41fe64acff868ab40c0c076539d0adfdefa01a797d9f81474f116a661840b844f8a57b22845cb0ce1bcd6b9094de7cd9333a3f78185ae92338106664650d5d524fc4950841ea0b4bd8abbc78ada5644297565b7ecf43467f67db7df52e0080aaa29ac76ba9ecf538ca55767b575506b5e45a0ded34b05239b76186e5930c6f31f1e6b239efea85ca9d3279d7e7a1d4d122103a3c603aad57621157b31deaa5ed3a6a18e350af4527194008dd76ec5c28d84d7305cbc02d58017fc106a9da4e9412745fbc3fcd6654f01d94f80825932d92e152489bdc87631a59c0f0ad21367ac1209948234d951b6d63d1ba595a9406ddb11a98b883d971c9f753435b8c29109330398a2f6b0bddf043d6988c8227daeb640e746f4ccb178b9627091411416bc596efce61278ac3fad8c5b05ee71aed37eea4c93f2c9c099b3e09e8443aeebe90d888a19eb86aaa8f3f7462daf5660cbdaff800fb9abc683edf51adb1533d9d707a818d73cee286ac3e63d0c61db29f983dc0f6167c8fbcca9ccb2036d1a994dd6c4de13d207e5ed01a19fc44c1b331d1a57d05e180bd839952b2c2572f784caf817ce54a1e3accc36b87c50fe7ed5f380cb72411e0cff897e38007f462c6055cbf823246e7add9e16c758dc5793169d5bfd0a2619ec2ce42ee93ad07e4aa6764184b950c4706411e27eb7ddb6b95ecacfd7ddaf34388cf82971129707c4e93b750f4f4f7334b80df8477ad63c134a7836ba685e1052b606a322248e9e4e0d2e75f1520203a9fabd67ad5b803bfcf817e09b6668cabfb7e599f60032a3c427a07c0f47b0a944dc097a759f6cdbbc03222dbfed7d82374ea0ad9b4b9d7d2f2a80b225cf787765eb87436349b8e6f512d4d9ae3ff2d0506219816947c118e62bb4513604552d74a9b7a262d500eb3baecdf0cd4564c2653b67f467e8ef9a213f30666adbeeffcdc862f55db6067cb620fa2fb004c28908da2a84160b5c580929ffa0f78510117299a5e1e6ee76d0b28ba6f6a9cb6f2a911553b6842189a24bb335087f9b08ce7695ff0bcc67b4eecc5cc77ae54abcfa9ae785275daf9588148c056b5d0de8a386a921f8b649815cca516d12a56b0b5148b5d00a08b2177a265571bd317d653576a1b7dff3a3a6e7d1273c439a7a10cb79dba05977b72e93a2a90a20751e9b411b758d22b49b96dce33203b2269ad0ee41607b7fafab582f6cc63626c662e32e3f1652de162413bffadde1c09a6cc34429dea5eab3f58accfcb26c42d595516b7c8f0fa6dc6f3633c7baa99e9dc9f61fed0d5d9740e718afd625bb557be631eb6c0d2e5e3a959845faed1a2fe67a9599c550b6580f38cc3a568e27a2488740b0b2739d10c1226d388102addbb059edd80c3e427194e95c916aff616ad4bd9d770f7f17f555496da4d668cd8cd8ddb414a6af2b2b37f2d9ab739655df4939eba0a7661d3ea3adad145e080dd0de9f2cf5a3102859f9368faebd1f1c6536cad9862fe6cb9763e50aab91c3b06fc8579651615ad0a119c421f08d4869c0fdeb3f812f8bbd1e11556de7f16c78e2fe2552d3ce149fff354ca35ac51ea71201750e05a74f59c3f985e76b7ae5fcf18f257336e446ba7402a4c362cd2953d2139c6f6d3fe6455245333187c4139308a83e601122612806a60f12fa5a6837b9e54e733afbf788d337adc2d5b2f9527b43f86969390dbac9a9d712c7707a9f40fe5ef1fa854d931aa2c81fc14c2a67d6e13b579013ccf50758833b53633553e3e005866182c3e0a54794d4973f37f02fb0397f02b276737ede45e38ee407ce3868c7dc81dd09a488e23e6e90cc6dc605e30bc3f47bd2ea33490005b63d5da90456efb09e8e49f10e47700741396315c631a5f46b9c839d4fb8ec88555ec6cc300bd1260ce761659d08ceb2ed4c55c24e0abae5d968b5b21bcda6dd8274f6d8d6f0e6c9d97cf00d5548b6a86eab33314d7d0dc756ba775a627510000ec0eba32e6ef45ae9d89c26ae17a88c948a096cee4d2368e849df40bd0a74c6d430cf340826437f7c87b084dda23cebf62d5d1a5e54b63cb49b7676377f8fdc2f9be92019de2726a8808bebd0eebc970da5523b39acc2a31bd82a37470f2d941b73b96c3d6c33a6d41f2372d1778eb6020e0dd4f1add724736fe05b218c5f43abbcfb8d6b15e224eb0fe0d4ae13768add7cff36b5b2fd60a2d29362b4c1ae78c41ff40f0f8d23bc756819e2ac56b63887b9eb385a5d44c8bcdcd1ba85f7a40171419bceea83ce1c03ebb379f39925905fbe2c53a50dc0e6ccbc128c9d8fe2792584a2340b88f65b8d4085f355c87bbb3b8b81c7b6751cdb6de9a449068cd864668ec89967175794f73d850ebd4780bb91d1715b6c850546bb43a83d4072399819dcf4ca6ad98da4987307fd5113775bb841a9b2322e78174e9026b0b9294596b115d4701cd462bbe304f43a6fbd66fa571498daaf3e515d0bee3b00ed75b21f6536f9244fd61b30e2021e7c7d7a40b5592f06c1147ccc44c935482919e08a89116a46c6b93f2011206af7b493ce4e35f5a50f76d0637f4b5df9caaa7d85263efa581c3f3513a4f7e5ef65ad057ce070c5ee87caf04ae5b4d0425d213a2f910a9cbd0dce195fe4a54a80bd76011acc3b40a931ca7f2302d1ce7a5f3257387cb475668c64bb6ce941c3d6609a6fdbfd7346934ba818174cebd65f2bb93d56ce32f89935861ea525ba6ab6dbb29176931a9ec9a48eca0d0cc2307adbd5c6a9d0d61a589ea1663dac122d1ca945460e2527e56f9f42d424bf660c4d2522cbf8f0facfaf197fa219f751933e9e7cf870d2b442e54622ed2a9bb9755a5e56b080bd75bb43b8c648a4983b36a715e918950147aa6ea3e772723f0379c143db86f14114e628630fe758fb48cb79ba26cc55cc80b66f84a41b707bd5ad97e02f3322ab7dd0dfc52855f88927cce8e49a993a1d33e34c9456ebf8b7bfcf0f27acbd3210fbe37e5ac53724f0b9d4f3b52e98c9e69319a991fe7cf08457142bdcde02615d78f83b369ce06147eee1af4e0d45cec25a31749d4217b8cd8b145738155b1e54c1923aa25a353cd4c253ef42d710f38e55ebe4d28fe4626de2973b7161aa3577055b39988e12992a10aee4f3ce6eec3a2f9446ab43ae262378ce40a946d528884bac87a4aacbcb7f4da692407bea46b32c865176cff5bef5643b3888a508d0d538420b7eae3a44be92f7fb681b9e303c4f472c9e244c4dea547edee5555c512e1b249e390dc1ff17d77780be94eefe4df9558fdb963d606f4ad9f12a734f11ec7e958bdfa1787d2b5ed9a1d150ec9a1d029269b97567a755941607e8d1104b5a8269dd71e32c072899c2ed8ca527fee7692aea3f6f410368b9ef1c1dce0f2352f8fe5f704b3d9d02a5c20ce06fad5196531d07b206ff5fada4e7ab59cc936c0cbdb34db3d255bbafb27b79053d913c8e19b01a0593a41af0a404b0107d07a2fe2a12f9b3ebefc807b86354b2727b7671b8ae8c0417b2146bf98a0d174b06eba1af9620ab67b09868e74f2fdb1822d29bcedef72fbcc217b656add24c7ed1b878acc5bbd895751b795f1a16ea1a1b9ceb7302e79949bc4607ef0dd2d12fc56e0657a8e5cd0561f85f187027242c648279138ac3e00e32806624249ca28a8ddff91da96f0f7db034b10388776d22e321c62f63dcadcdcb1437a0b937f881d1aa0fd8454a2f0219ffe28b3c2bf10067119204f10dc4e3566c0ba15a05c913976812cd928ef927c83d4c3433aa42e924dca3086883048bbbb972af3ca33b139258cf6732e33007fe8987798dcc46f307b09ff00a47a39fca0c7b7fc2a326c270a23872980bdf3cb795d4c497b9dfa946ee3517d4a3f72fdb731f1ce44033b5d4d8ef69f4e428e479fa034ca8d81a5d19c845d2233363c21f7d237c3e8844373777942e08815265f896da0946f0a95c71600e6490974abcf7e3fe109b8b77955093a146ad9a75ace2e656b6d400", 0x1000}], 0x7, 0x0, 0x0, 0x40}, 0x800) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) 2.163955955s ago: executing program 2 (id=979): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) msgctl$MSG_STAT(0x0, 0xb, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000240), 0xd21, 0x4000) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0xf, &(0x7f00000002c0)=ANY=[@ANYBLOB="18080000ff00000000000000fbffffff181100008d4bdaba7f3f95c755763fdf8af73430c94f82d83389543ba4844364e8e100402ce7a5e401f565f0c24d0f5fdcb7a6031a068312e2e2510aa65f1a3c71683fb54c76f96137a2d94150eb1ae3cd093efb7bdf1acafb19be97ad1bd0e38b3d5f6f1da1fc8b61950c27e169a6318eec19", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000030000008500000005000000bf0900000000000055090100000000009500000000000000bf9800000000000056080000020000008500000007000000b7000000000000009500000000000000"], 0x0, 0x9, 0x0, 0x0, 0x40f00, 0x46, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) recvmmsg(r4, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a3100000000090003"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) syz_clone(0x100011, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000680), 0x8, 0x2) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0xa4, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @loopback}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_HELP={0x10, 0x5, 0x0, 0x1, {0xa, 0x1, 'Q.931\x00'}}]}, 0xa4}}, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x800007, 0x11, r5, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) 2.118142111s ago: executing program 3 (id=980): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$nl_generic(0x10, 0x3, 0x10) socket(0x400000000010, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x400000000010, 0x3, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/rt_acct\x00') r2 = socket(0x2, 0xa, 0x0) sendfile(r2, r1, 0x0, 0x8) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r3) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x106}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 1.896403363s ago: executing program 4 (id=981): sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0x1, &(0x7f0000000180)=ANY=[@ANYBLOB="85864260929a00000000000000000000400061d5165220f146dbe87c444870e992903ae3a0b93ae622d259a7a42868fbfb5266d5e95bef28e3c9fd368e8542d98b201aa042c8675f21bde27ee563afcb72c99d305318b1daca000000f5f27e9e67c0921ad8eda690decfdfa0f827dc35614f325d554fb0d107d67ceb98f6bdf3987f6746d6bc9e3cf0a679dc6a194d98fc5f626e65b12fb17fc56cd946e13902ac55a2bf413717fb"], 0xfffffffffffffffe}, 0x90) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) r2 = syz_open_dev$sg(&(0x7f00000004c0), 0x0, 0x20c02) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000040)="aefdda9d240303005a90f57f07703aeff0f64eb9ee07962c220a2e11b44e65d76641cb010852f426072a", 0x2a}], 0x1) read(r2, &(0x7f0000001400)=""/4076, 0xfffffeea) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x17) msgget$private(0x0, 0x4a0) r3 = syz_open_dev$sndctrl(&(0x7f00000012c0), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r3, 0xc2c45512, &(0x7f0000000a00)={{0x5, 0x0, 0x0, 0x8, 'syz1\x00'}, 0x0, [0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10008, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x800, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) memfd_create(&(0x7f00000001c0)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1cs1F59\xcdR\xc1\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00\xc1\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9usy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9b\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa\xe7\xd6\xa3\x00'/706, 0x6) r4 = syz_open_procfs$pagemap(0x0, &(0x7f0000000240)) ioctl$PAGEMAP_SCAN(r4, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f00001cd000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x9, &(0x7f00000021c0)=[{0x2000000000000009, 0xffffffff, 0x1}], 0x1, 0xc2ff, 0x0, 0x0, 0x0, 0x76}) syz_usb_connect(0x0, 0x24, 0x0, 0x0) 1.70339015s ago: executing program 3 (id=982): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab1204000000000000010902240001b30000040904410c17ff5d810009050f1f05e13f000009058303"], 0x0) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x3b, &(0x7f0000000000)=ANY=[]) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000340)=@newqdisc={0x24, 0x28, 0x400, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, 0x0, {0xffff, 0xe}, {0xb, 0xffff}, {0x2, 0x1}}}, 0x24}}, 0x44001) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a0b040000000000000000020000004c000480240001800b000100736f636b657400001400028008000240000000070800014000000002240001800b00010065787468647200084068aefbd79ef1400000001508000640000000020900010073797a30000000000900020073797a32"], 0xa0}, 0x1, 0x0, 0x0, 0x4000040}, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000040)=[0x0], 0x1}) r4 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r4, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r4, 0x200) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) syz_usb_connect(0x5, 0x27, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000b75c7f40470501026411010203010902120001000000000904"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40500000006000700000000039500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0x3, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r6 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r7 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r7, 0x40085112, &(0x7f0000000080)=@echo=0x7) syz_usb_connect$uac2(0x3, 0xf4, &(0x7f0000000340)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0xff, 0x194f, 0x10c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xe2, 0x3, 0x1, 0x8, 0x40, 0x81, {0x8, 0xb, 0x0, 0x2, 0x1, 0x9, 0x20, 0x87}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x2, 0x2, 0x18, 0x1}, [@feature_unit={0x7, 0x24, 0x6, 0x4, 0x5, [0x2]}, @source_unit={0x8, 0x24, 0xa, 0x9, 0x3, 0x0, 0x80, 0x1}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0x6, 0x1, 0x1, 0x81, "c77e4f", "a2c9"}, @format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0x4, 0x8, 0x3, '68'}, @format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x22e9, 0x341, 0x3}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x0, 0x6}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x62, 0xc, 0x8, {0x8, 0x25, 0x1, 0x80, 0x3, 0x4, 0xa}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x6, 0x62, 0x6, 0x5, 0x2f}, @as_header={0x10, 0x24, 0x1, 0x4, 0x0, 0x3, 0x5, 0xcd, 0x1, 0x7}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x800, 0xef46, 0x40, 0x9}, @as_header={0x10, 0x24, 0x1, 0x7, 0x5, 0x1, 0x3, 0x8, 0x1, 0x9}, @as_header={0x10, 0x24, 0x1, 0x4, 0x3, 0x3, 0x1002, 0xc8, 0xf2d, 0x7}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x1, 0x4, 0x9, {0x8, 0x25, 0x1, 0x80, 0x30, 0x5, 0x2}}}}}}}}]}}, &(0x7f0000000640)={0xa, &(0x7f0000000440)={0xa, 0x6, 0x0, 0x81, 0x5, 0x8, 0x8, 0x7}, 0x6f, &(0x7f0000000680)=ANY=[@ANYBLOB="050f6f10050b10010805000f060001070a10030202000908060024100000000000000ff0050030ffff00003fff00000000000000ff00003f00000f00ff0003100b2e100affce290b0014f32160da49c42630122ef0a1e6c2f5f092fe05c8d17c4c766a96f4a24ab886a2f4d34523130e77e372111d6b229a0df09e940b5b"], 0x4, [{0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x827}}, {0x5c, &(0x7f0000000540)=ANY=[@ANYBLOB="5c03f7f846fcecb7694e11782391f0a02da7ad4b7a8c6a65ed782540d2d51b5b05102971a9fd05e9891a73ab8c3a0630bc0799bd953f13754f35dfae33f6437747ef60301d55f37dfa945a14bac3df04ba84de6f97ad000000000000"]}, {0x2, &(0x7f00000005c0)=@string={0x2}}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x424}}]}) write$UHID_CREATE2(r6, 0x0, 0x119) r8 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) ioctl$I2C_RDWR(r8, 0x707, &(0x7f0000000100)={&(0x7f0000000000)=[{0xee, 0x4a11, 0x0, 0x0}], 0x1}) socket(0x23, 0x6, 0x3) syz_usb_connect$midi(0x3, 0xe7, &(0x7f0000000140)={{0x12, 0x1, 0x351, 0x0, 0x0, 0x0, 0x0, 0x582, 0xc, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xd5, 0x1, 0x1, 0x2, 0x90, 0xff, "", {{{0x9, 0x4, 0x0, 0x0, 0x6, 0x1, 0x3, 0x0, 0x7, [@ms_header={0x7, 0x24, 0x1, 0x5, 0x7}, @midi_in_jack={0x6, 0x24, 0x2, 0x5, 0x2, 0x7}, @ms_header={0x7, 0x24, 0x1, 0x85, 0x7}, @midi_out_jack={0x17, 0x24, 0x3, 0x3, 0x4, 0x8, [{0x4, 0xff}, {0x9, 0x8}, {0xb}, {0x4, 0xec}, {0x4, 0xf2}, {0x7f, 0x42}, {0x7, 0xfd}, {0x2, 0x5}], 0xd8}, @midi_out_jack={0x7, 0x24, 0x3, 0x3, 0x4, 0x0, [], 0x81}, @ms_header={0x7, 0x24, 0x1, 0x3, 0x7}, @ms_header={0x7, 0x24, 0x1, 0x5, 0x7}, @midi_out_jack={0x9, 0x24, 0x3, 0x3, 0x7, 0x1, [{0x5, 0x71}], 0x7}], [{{0x9, 0x5, 0x6, 0xc, 0x200, 0x0, 0x80, 0xaf, {0xe, 0x25, 0x1, 0xa, "b026680fa56b4508ca66"}}}, {{0x9, 0x5, 0xa, 0x0, 0x3ff, 0x8, 0x80, 0x0, {0xd, 0x25, 0x1, 0x9, "0d43a6f58fe89e2c77"}}}, {{0x9, 0x5, 0x7, 0x0, 0x200, 0x4, 0x4, 0x5, {0x10, 0x25, 0x1, 0xc, "0e65aac847a067114235b3a3"}}}, {{0x9, 0x5, 0xb, 0x0, 0x8, 0xe4, 0x8, 0x5, {0x5, 0x25, 0x1, 0x1, '~'}}}, {{0x9, 0x5, 0x6, 0x8, 0x400, 0x72, 0x81, 0x6, {0xb, 0x25, 0x1, 0x7, "821d413d3a13cd"}}}, {{0x9, 0x5, 0xd, 0x10, 0x200, 0x2, 0x0, 0x5c, {0x9, 0x25, 0x1, 0x5, "23ca7eec48"}}}]}}}}}]}}, &(0x7f0000000300)={0xa, &(0x7f0000003a80)={0xa, 0x6, 0x310, 0x38, 0x8, 0x5, 0x20, 0x2}, 0x2f, &(0x7f0000000280)={0x5, 0xf, 0x2f, 0x2, [@ssp_cap={0x20, 0x10, 0xa, 0x5, 0x5, 0x5, 0xff00, 0x3ff, [0xff00c0, 0x30, 0xc000, 0x0, 0x3f0f]}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x3, 0x0, 0x40}]}, 0x1, [{0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x4c6d}}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x139}, 0x48) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) 1.663993825s ago: executing program 0 (id=983): socket$can_j1939(0x1d, 0x2, 0x7) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000180)=0x84000000) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000080)=0x6100204) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000001c0)={0x30000010}) pwritev(r0, &(0x7f00000003c0)=[{&(0x7f0000000400)="0084", 0x2}], 0x1, 0x7fff, 0x1) r2 = socket$qrtr(0x2a, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, &(0x7f00000000c0)={0x0, 0x3, 0x4f, "95c2b8bad575f4fa9bc1e3d605b95e4c445da89a397e551158a88fd3915e94b86de2bd51135f97108cd95f42e2630cf8c6cb4585d41bb5593afe17c8f6a3482712d04ce36afbb1a686923864c678c4"}, 0x57) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @multicast2}, 0x2, 0x0, 0x4}}, 0x2e) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) syz_usb_connect(0x5, 0x239, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e388d640697a01006ba8010203010902270201020010000904"], 0x0) r3 = syz_open_dev$I2C(&(0x7f0000000180), 0x5, 0x0) writev(r3, &(0x7f00000002c0)=[{&(0x7f0000000080)="03", 0x1}], 0x1) 1.378239197s ago: executing program 1 (id=984): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab1204000000000000010902240001b30000040904410c17ff5d810009050f1f05e13f000009058303"], 0x0) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x3b, &(0x7f0000000000)=ANY=[]) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000340)=@newqdisc={0x24, 0x28, 0x400, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, 0x0, {0xffff, 0xe}, {0xb, 0xffff}, {0x2, 0x1}}}, 0x24}}, 0x44001) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a0b040000000000000000020000004c000480240001800b000100736f636b657400001400028008000240000000070800014000000002240001800b00010065787468647200084068aefbd79ef1400000001508000640000000020900010073797a30000000000900020073797a32"], 0xa0}, 0x1, 0x0, 0x0, 0x4000040}, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000040)=[0x0], 0x1}) r4 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r4, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r4, 0x200) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) syz_usb_connect(0x5, 0x27, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000b75c7f40470501026411010203010902120001000000000904"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40500000006000700000000039500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0x3, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r6 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r7 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r7, 0x40085112, &(0x7f0000000080)=@echo=0x7) syz_usb_connect$uac2(0x3, 0xf4, &(0x7f0000000340)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0xff, 0x194f, 0x10c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xe2, 0x3, 0x1, 0x8, 0x40, 0x81, {0x8, 0xb, 0x0, 0x2, 0x1, 0x9, 0x20, 0x87}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x2, 0x2, 0x18, 0x1}, [@feature_unit={0x7, 0x24, 0x6, 0x4, 0x5, [0x2]}, @source_unit={0x8, 0x24, 0xa, 0x9, 0x3, 0x0, 0x80, 0x1}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0x6, 0x1, 0x1, 0x81, "c77e4f", "a2c9"}, @format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0x4, 0x8, 0x3, '68'}, @format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x22e9, 0x341, 0x3}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x0, 0x6}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x62, 0xc, 0x8, {0x8, 0x25, 0x1, 0x80, 0x3, 0x4, 0xa}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x6, 0x62, 0x6, 0x5, 0x2f}, @as_header={0x10, 0x24, 0x1, 0x4, 0x0, 0x3, 0x5, 0xcd, 0x1, 0x7}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x800, 0xef46, 0x40, 0x9}, @as_header={0x10, 0x24, 0x1, 0x7, 0x5, 0x1, 0x3, 0x8, 0x1, 0x9}, @as_header={0x10, 0x24, 0x1, 0x4, 0x3, 0x3, 0x1002, 0xc8, 0xf2d, 0x7}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x1, 0x4, 0x9, {0x8, 0x25, 0x1, 0x80, 0x30, 0x5, 0x2}}}}}}}}]}}, &(0x7f0000000640)={0xa, &(0x7f0000000440)={0xa, 0x6, 0x0, 0x81, 0x5, 0x8, 0x8, 0x7}, 0x6f, &(0x7f0000000680)=ANY=[@ANYBLOB="050f6f10050b10010805000f060001070a10030202000908060024100000000000000ff0050030ffff00003fff00000000000000ff00003f00000f00ff0003100b2e100affce290b0014f32160da49c42630122ef0a1e6c2f5f092fe05c8d17c4c766a96f4a24ab886a2f4d34523130e77e372111d6b229a0df09e940b5b"], 0x4, [{0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x827}}, {0x5c, &(0x7f0000000540)=ANY=[@ANYBLOB="5c03f7f846fcecb7694e11782391f0a02da7ad4b7a8c6a65ed782540d2d51b5b05102971a9fd05e9891a73ab8c3a0630bc0799bd953f13754f35dfae33f6437747ef60301d55f37dfa945a14bac3df04ba84de6f97ad000000000000"]}, {0x2, &(0x7f00000005c0)=@string={0x2}}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x424}}]}) write$UHID_CREATE2(r6, 0x0, 0x119) r8 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) ioctl$I2C_RDWR(r8, 0x707, &(0x7f0000000100)={&(0x7f0000000000)=[{0xee, 0x4a11, 0x0, 0x0}], 0x1}) socket(0x23, 0x6, 0x3) syz_usb_connect$midi(0x3, 0xe7, &(0x7f0000000140)={{0x12, 0x1, 0x351, 0x0, 0x0, 0x0, 0x0, 0x582, 0xc, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xd5, 0x1, 0x1, 0x2, 0x90, 0xff, "", {{{0x9, 0x4, 0x0, 0x0, 0x6, 0x1, 0x3, 0x0, 0x7, [@ms_header={0x7, 0x24, 0x1, 0x5, 0x7}, @midi_in_jack={0x6, 0x24, 0x2, 0x5, 0x2, 0x7}, @ms_header={0x7, 0x24, 0x1, 0x85, 0x7}, @midi_out_jack={0x17, 0x24, 0x3, 0x3, 0x4, 0x8, [{0x4, 0xff}, {0x9, 0x8}, {0xb}, {0x4, 0xec}, {0x4, 0xf2}, {0x7f, 0x42}, {0x7, 0xfd}, {0x2, 0x5}], 0xd8}, @midi_out_jack={0x7, 0x24, 0x3, 0x3, 0x4, 0x0, [], 0x81}, @ms_header={0x7, 0x24, 0x1, 0x3, 0x7}, @ms_header={0x7, 0x24, 0x1, 0x5, 0x7}, @midi_out_jack={0x9, 0x24, 0x3, 0x3, 0x7, 0x1, [{0x5, 0x71}], 0x7}], [{{0x9, 0x5, 0x6, 0xc, 0x200, 0x0, 0x80, 0xaf, {0xe, 0x25, 0x1, 0xa, "b026680fa56b4508ca66"}}}, {{0x9, 0x5, 0xa, 0x0, 0x3ff, 0x8, 0x80, 0x0, {0xd, 0x25, 0x1, 0x9, "0d43a6f58fe89e2c77"}}}, {{0x9, 0x5, 0x7, 0x0, 0x200, 0x4, 0x4, 0x5, {0x10, 0x25, 0x1, 0xc, "0e65aac847a067114235b3a3"}}}, {{0x9, 0x5, 0xb, 0x0, 0x8, 0xe4, 0x8, 0x5, {0x5, 0x25, 0x1, 0x1, '~'}}}, {{0x9, 0x5, 0x6, 0x8, 0x400, 0x72, 0x81, 0x6, {0xb, 0x25, 0x1, 0x7, "821d413d3a13cd"}}}, {{0x9, 0x5, 0xd, 0x10, 0x200, 0x2, 0x0, 0x5c, {0x9, 0x25, 0x1, 0x5, "23ca7eec48"}}}]}}}}}]}}, &(0x7f0000000300)={0xa, &(0x7f0000003a80)={0xa, 0x6, 0x310, 0x38, 0x8, 0x5, 0x20, 0x2}, 0x2f, &(0x7f0000000280)={0x5, 0xf, 0x2f, 0x2, [@ssp_cap={0x20, 0x10, 0xa, 0x5, 0x5, 0x5, 0xff00, 0x3ff, [0xff00c0, 0x30, 0xc000, 0x0, 0x3f0f]}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x3, 0x0, 0x40}]}, 0x1, [{0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x4c6d}}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x139}, 0x48) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) 0s ago: executing program 2 (id=985): syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x8, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000008300), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000002100)=ANY=[@ANYBLOB, @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r0, &(0x7f00000021c0), 0x2000, &(0x7f00000041c0)={&(0x7f0000000080)={0x50, 0x0, 0x0, {0x7, 0x29, 0x7, 0x12510421, 0x3, 0xc, 0x1, 0x56, 0x0, 0x0, 0x2, 0x9cea}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000008340)="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", 0x2000, &(0x7f0000000f80)={&(0x7f00000003c0)={0x50, 0xffffffffffffffda, 0x5, {0x7, 0x2d, 0x800003, 0x4404002, 0xfbfb, 0x0, 0x0, 0x1008000, 0x0, 0x0, 0x2, 0xa4}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setxattr$system_posix_acl(&(0x7f0000000100)='./file0\x00', &(0x7f0000000040)='system.posix_acl_default\x00', 0x0, 0x0, 0x2) setxattr$system_posix_acl(&(0x7f0000000140)='./file0\x00', &(0x7f0000002b80)='system.posix_acl_access\x00', 0x0, 0x0, 0x3) kernel console output (not intermixed with test programs): TASK> [ 270.761583][ T8070] dump_stack_lvl+0xe8/0x150 [ 270.761623][ T8070] should_fail_ex+0x412/0x560 [ 270.761656][ T8070] _copy_from_iter+0x1d3/0x1670 [ 270.761683][ T8070] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 270.761722][ T8070] ? __pfx_policy_nodemask+0x10/0x10 [ 270.761759][ T8070] ? __pfx__copy_from_iter+0x10/0x10 [ 270.761790][ T8070] ? alloc_pages_mpol+0x3c0/0x490 [ 270.761832][ T8070] copy_page_from_iter+0x220/0x2d0 [ 270.761865][ T8070] tun_get_user+0x1bf7/0x43e0 [ 270.761892][ T8070] ? tun_get_user+0x8aa/0x43e0 [ 270.761942][ T8070] ? aa_file_perm+0x50e/0x15e0 [ 270.761972][ T8070] ? __pfx_tun_get_user+0x10/0x10 [ 270.762000][ T8070] ? __lock_acquire+0x6b5/0x2cf0 [ 270.762039][ T8070] ? ref_tracker_alloc+0x35c/0x4c0 [ 270.762071][ T8070] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 270.762102][ T8070] ? tun_get+0x1c/0x2f0 [ 270.762127][ T8070] ? tun_get+0x1c/0x2f0 [ 270.762157][ T8070] ? tun_get+0x1c/0x2f0 [ 270.762181][ T8070] ? tun_get+0x1c/0x2f0 [ 270.762211][ T8070] tun_chr_write_iter+0x113/0x200 [ 270.762240][ T8070] vfs_write+0x61d/0xb90 [ 270.762279][ T8070] ? __pfx_vfs_write+0x10/0x10 [ 270.762324][ T8070] ? __fget_files+0x2a/0x420 [ 270.762483][ T8070] ksys_write+0x150/0x270 [ 270.762522][ T8070] ? __pfx_ksys_write+0x10/0x10 [ 270.762564][ T8070] ? asm_int80_emulation+0x1a/0x20 [ 270.762590][ T8070] do_int80_emulation+0x181/0x530 [ 270.762616][ T8070] ? trace_irq_disable+0x3b/0x140 [ 270.762740][ T8070] ? asm_int80_emulation+0x1a/0x20 [ 270.762769][ T8070] ? clear_bhb_loop+0x40/0x90 [ 270.762790][ T8070] ? clear_bhb_loop+0x40/0x90 [ 270.762816][ T8070] asm_int80_emulation+0x1a/0x20 [ 270.762836][ T8070] RIP: 0023:0xf712616b [ 270.762856][ T8070] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 270.762874][ T8070] RSP: 002b:00000000f53dd44c EFLAGS: 00000246 ORIG_RAX: 0000000000000004 [ 270.762896][ T8070] RAX: ffffffffffffffda RBX: 00000000000000c8 RCX: 0000000080000080 [ 270.762911][ T8070] RDX: 000000000000003e RSI: 0000000000000000 RDI: 0000000000000000 [ 270.762923][ T8070] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 270.762935][ T8070] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 270.762947][ T8070] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 270.762978][ T8070] [ 271.119356][ T5716] usb 4-1: Using ep0 maxpacket: 16 [ 271.127408][ T5364] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 271.139053][ T5364] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 271.150841][ T5716] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 271.162506][ T5716] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 271.172555][ T5716] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 271.185727][ T5716] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 271.195118][ T5716] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.209162][ T5716] usb 4-1: config 0 descriptor?? [ 271.214635][ T5364] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 271.224084][ T5364] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 271.232274][ T5364] usb 1-1: SerialNumber: syz [ 271.496257][ T8062] netlink: 32 bytes leftover after parsing attributes in process `syz.0.724'. [ 271.519413][ T8062] netlink: 32 bytes leftover after parsing attributes in process `syz.0.724'. [ 271.562505][ T5364] usb 1-1: 0:2 : does not exist [ 271.570848][ T5364] usb 1-1: unit 5: unexpected type 0x0b [ 271.595329][ T8079] bridge0: port 2(bridge_slave_1) entered disabled state [ 271.634195][ T8079] sctp: [Deprecated]: syz.4.731 (pid 8079) Use of int in max_burst socket option. [ 271.634195][ T8079] Use struct sctp_assoc_value instead [ 271.653860][ T5716] microsoft 0003:045E:07DA.0015: invalid report_size 33892 [ 271.668079][ T5716] microsoft 0003:045E:07DA.0015: item 0 2 1 7 parsing failed [ 271.709601][ T808] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 271.713600][ T5716] microsoft 0003:045E:07DA.0015: parse failed [ 271.736227][ T5716] microsoft 0003:045E:07DA.0015: probe with driver microsoft failed with error -22 [ 271.767765][ T5364] usb 1-1: USB disconnect, device number 48 [ 271.870227][ T5796] udevd[5796]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 271.910245][ T808] usb 2-1: unable to get BOS descriptor or descriptor too short [ 271.932933][ T808] usb 2-1: config 129 has an invalid interface number: 135 but max is 0 [ 271.950828][ T808] usb 2-1: config 129 has an invalid interface number: 5 but max is 0 [ 271.959936][ T5726] usb 4-1: USB disconnect, device number 36 [ 271.984984][ T808] usb 2-1: config 129 has 2 interfaces, different from the descriptor's value: 1 [ 271.994427][ T24] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 272.002869][ T808] usb 2-1: config 129 has no interface number 0 [ 272.022371][ T808] usb 2-1: config 129 has no interface number 1 [ 272.028863][ T808] usb 2-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 272.056371][ T808] usb 2-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30 [ 272.076284][ T808] usb 2-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37 [ 272.091169][ T808] usb 2-1: config 129 interface 135 has no altsetting 0 [ 272.098219][ T808] usb 2-1: config 129 interface 5 has no altsetting 0 [ 272.113895][ T808] usb 2-1: string descriptor 0 read error: -22 [ 272.127286][ T808] usb 2-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.00 [ 272.138271][ T808] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.175117][ T24] usb 3-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 272.190914][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.202813][ T808] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 272.210562][ T24] usb 3-1: Product: syz [ 272.214879][ T808] usb 2-1: MIDIStreaming interface descriptor not found [ 272.222828][ T24] usb 3-1: Manufacturer: syz [ 272.227550][ T24] usb 3-1: SerialNumber: syz [ 272.247469][ T24] usb 3-1: config 0 descriptor?? [ 272.317891][ T24] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 272.503562][ T808] usb 2-1: USB disconnect, device number 47 [ 272.765992][ T8090] netlink: 'syz.0.734': attribute type 3 has an invalid length. [ 272.780962][ T8090] netlink: 666 bytes leftover after parsing attributes in process `syz.0.734'. [ 272.896912][ T8094] input: syz1 as /devices/virtual/input/input34 [ 273.317360][ T8081] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 273.333968][ T8105] netlink: 'syz.0.738': attribute type 4 has an invalid length. [ 273.352601][ T8081] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 273.539554][ T5726] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 273.609410][ T24] gspca_sunplus: reg_w_riv err -110 [ 273.629765][ T24] sunplus 3-1:0.0: probe with driver sunplus failed with error -110 [ 273.701249][ T5726] usb 2-1: config 0 has an invalid interface number: 64 but max is 0 [ 273.711591][ T5364] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 273.731657][ T5726] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 273.750658][ T5726] usb 2-1: config 0 has no interface number 0 [ 273.762629][ T5726] usb 2-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 273.773922][ T5726] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 273.784884][ T5726] usb 2-1: Product: syz [ 273.789716][ T5726] usb 2-1: Manufacturer: syz [ 273.794805][ T5726] usb 2-1: SerialNumber: syz [ 273.805757][ T5726] usb 2-1: config 0 descriptor?? [ 273.826784][ T5726] uvcvideo 2-1:0.64: probe with driver uvcvideo failed with error -22 [ 273.878125][ T8116] netlink: 'syz.3.742': attribute type 1 has an invalid length. [ 273.888926][ T24] usb 3-1: USB disconnect, device number 47 [ 273.896660][ T5364] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 273.905828][ T9] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 273.915942][ T5364] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 273.929778][ T5364] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 273.939573][ T5364] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 273.952953][ T5364] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 273.962599][ T5364] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 273.971333][ T5364] usb 5-1: Product: syz [ 273.975719][ T5364] usb 5-1: Manufacturer: syz [ 273.993347][ T5364] cdc_wdm 5-1:1.0: skipping garbage [ 273.998834][ T5364] cdc_wdm 5-1:1.0: skipping garbage [ 274.008419][ T5364] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 274.014588][ T5364] cdc_wdm 5-1:1.0: Unknown control protocol [ 274.026121][ T5726] usb 2-1: USB disconnect, device number 48 [ 274.071104][ T9] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 274.093972][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 274.108299][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 274.119232][ T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 274.136148][ T9] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 274.150837][ T9] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 274.158956][ T9] usb 1-1: Product: syz [ 274.163611][ T9] usb 1-1: Manufacturer: syz [ 274.184606][ T9] cdc_wdm 1-1:1.0: skipping garbage [ 274.200789][ T9] cdc_wdm 1-1:1.0: skipping garbage [ 274.207709][ T8110] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 274.219989][ T8110] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 274.240362][ T9] cdc_wdm 1-1:1.0: cdc-wdm1: USB WDM device [ 274.250826][ T9] cdc_wdm 1-1:1.0: Unknown control protocol [ 274.355602][ T9] usb 5-1: USB disconnect, device number 44 [ 274.355944][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 274.368250][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 274.374391][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 274.403726][ T8113] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 274.417773][ T8113] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 274.451271][ T24] usb 1-1: USB disconnect, device number 49 [ 274.462076][ T29] audit: type=1326 audit(1777368241.261:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8124 comm="syz.3.745" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f0301c code=0x7ffc0000 [ 274.486015][ T29] audit: type=1326 audit(1777368241.291:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8124 comm="syz.3.745" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f0301c code=0x7ffc0000 [ 274.537651][ T29] audit: type=1326 audit(1777368241.331:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8124 comm="syz.3.745" exe="/root/syz-executor" sig=0 arch=40000003 syscall=258 compat=1 ip=0xf7f0301c code=0x7ffc0000 [ 274.584062][ T29] audit: type=1326 audit(1777368241.361:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8124 comm="syz.3.745" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f0301c code=0x7ffc0000 [ 274.644330][ T29] audit: type=1326 audit(1777368241.361:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8124 comm="syz.3.745" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f0301c code=0x7ffc0000 [ 274.678970][ T29] audit: type=1326 audit(1777368241.471:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8124 comm="syz.3.745" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f0301c code=0x7ffc0000 [ 274.703132][ T29] audit: type=1326 audit(1777368241.471:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8124 comm="syz.3.745" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f0301c code=0x7ffc0000 [ 274.736919][ T29] audit: type=1326 audit(1777368241.471:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8124 comm="syz.3.745" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f0301c code=0x7ffc0000 [ 274.784581][ T29] audit: type=1326 audit(1777368241.471:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8124 comm="syz.3.745" exe="/root/syz-executor" sig=0 arch=40000003 syscall=289 compat=1 ip=0xf7f0301c code=0x7ffc0000 [ 274.830527][ T29] audit: type=1326 audit(1777368241.471:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8124 comm="syz.3.745" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f0301c code=0x7ffc0000 [ 275.628581][ T8148] netlink: 'syz.3.751': attribute type 4 has an invalid length. [ 275.647487][ T9] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 275.669733][ T8151] netlink: 'syz.1.753': attribute type 1 has an invalid length. [ 275.820407][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 275.832246][ T9] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 275.849346][ T9] usb 1-1: config 179 has no interface number 0 [ 275.862901][ T9] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 275.889910][ T9] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 275.903875][ T9] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 275.915857][ T9] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 275.928819][ T9] usb 1-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 275.962892][ T9] usb 1-1: config 179 interface 65 has no altsetting 0 [ 275.974573][ T9] usb 1-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 276.020657][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.087953][ T9] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input35 [ 276.133575][ T8165] netlink: 60 bytes leftover after parsing attributes in process `syz.3.756'. [ 276.289650][ T5364] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 276.366291][ T8142] netlink: 20 bytes leftover after parsing attributes in process `syz.0.750'. [ 276.378447][ T8142] netlink: 20 bytes leftover after parsing attributes in process `syz.0.750'. [ 276.420170][ T8142] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 276.443736][ T8142] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 276.452485][ T9] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 276.480476][ T8142] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 276.489654][ T5364] usb 2-1: unable to get BOS descriptor or descriptor too short [ 276.503320][ T5364] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 276.511708][ T8142] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 276.531015][ T5364] usb 2-1: New USB device found, idVendor=0b05, idProduct=1743, bcdDevice= 0.40 [ 276.564877][ T8142] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 276.574653][ T5364] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 276.582003][ T8142] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 276.603932][ T5364] usb 2-1: Product: ⫡ⷞ潗芨혫졫걮칭ꐬገ丕킴洞톍・쒊駅灈ﷸꨛὝ뛘잽 [ 276.640639][ T9] usb 5-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 276.652011][ T5364] usb 2-1: Manufacturer: ႀ쒻鶴瓠ℷ리蟎龅菊菺跞螻溍ꣷ뒋쾤䶤ᝬ難ᰬ᫗巜霎ንἢ᫺専噘韖篡犛丘㺚㟴坋ᔷशఓࣴ퓩ᦖ㟩灮⏙㞇遨粢㓲䡬乽貤㣢ꯡ㝨쌆瘾䤑ㆀ㩍鏤鍞泊撼䃴떉篺ዀ꾝箈딘슣쏂盹螋䠩䈺좽頫駥덗陴樀秌淏茁俞ᙃ薏퉝ኧ觙喪냀謇甒⥬ [ 276.663622][ T24] usb 1-1: USB disconnect, device number 50 [ 276.688059][ C0] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 276.706308][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 276.721943][ T9] usb 5-1: Product: syz [ 276.745228][ T9] usb 5-1: Manufacturer: syz [ 276.770406][ T9] usb 5-1: SerialNumber: syz [ 276.778904][ T5364] usb 2-1: SerialNumber: syz [ 276.791193][ T9] usb 5-1: config 0 descriptor?? [ 276.818434][ T9] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 277.178467][ T8173] netlink: 2028 bytes leftover after parsing attributes in process `syz.1.754'. [ 277.205140][ T8173] netlink: 24 bytes leftover after parsing attributes in process `syz.1.754'. [ 277.606769][ T8182] netlink: 12 bytes leftover after parsing attributes in process `syz.2.760'. [ 277.619279][ T5726] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 277.781291][ T5726] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 277.790949][ T5726] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 277.802057][ T5726] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 277.813424][ T5726] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 277.828968][ T8168] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 277.840171][ T5726] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 277.850256][ T8168] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 277.858156][ T5726] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 277.868217][ T5726] usb 4-1: Product: syz [ 277.874729][ T5726] usb 4-1: Manufacturer: syz [ 277.896027][ T5726] cdc_wdm 4-1:1.0: skipping garbage [ 277.901848][ T5726] cdc_wdm 4-1:1.0: skipping garbage [ 277.915513][ T5726] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 277.922696][ T5726] cdc_wdm 4-1:1.0: Unknown control protocol [ 278.118547][ T8176] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 278.132397][ T9] gspca_sunplus: reg_w_riv err -110 [ 278.138805][ T9] sunplus 5-1:0.0: probe with driver sunplus failed with error -110 [ 278.152372][ T8176] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 278.217735][ T9] usb 5-1: USB disconnect, device number 45 [ 278.484123][ C0] cdc_wdm 4-1:1.0: Unexpected error -71 [ 278.489833][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 278.496477][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 278.502792][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 278.509438][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 278.516870][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 278.523511][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 278.530364][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 278.537000][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 278.543447][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 278.550143][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 278.556573][ T9] usb 4-1: USB disconnect, device number 37 [ 278.562621][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 278.562642][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 278.562656][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 278.707677][ T8191] netlink: 'syz.0.764': attribute type 1 has an invalid length. [ 279.095183][ T5364] usb 2-1: unit 4 not found! [ 279.136098][ T8199] netlink: 'syz.4.766': attribute type 4 has an invalid length. [ 279.220386][ T5364] usb 2-1: USB disconnect, device number 49 [ 279.274850][ T5796] udevd[5796]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 279.420389][ T8205] netlink: 60 bytes leftover after parsing attributes in process `syz.4.768'. [ 279.542638][ T8210] FAULT_INJECTION: forcing a failure. [ 279.542638][ T8210] name failslab, interval 1, probability 0, space 0, times 0 [ 279.593992][ T8210] CPU: 0 UID: 0 PID: 8210 Comm: syz.0.769 Tainted: G L syzkaller #0 PREEMPT(full) [ 279.594028][ T8210] Tainted: [L]=SOFTLOCKUP [ 279.594037][ T8210] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 279.594051][ T8210] Call Trace: [ 279.594061][ T8210] [ 279.594070][ T8210] dump_stack_lvl+0xe8/0x150 [ 279.594103][ T8210] should_fail_ex+0x412/0x560 [ 279.594138][ T8210] should_failslab+0xa8/0x100 [ 279.594175][ T8210] __kmalloc_noprof+0xe8/0x760 [ 279.594207][ T8210] ? tomoyo_encode+0x28b/0x550 [ 279.594244][ T8210] tomoyo_encode+0x28b/0x550 [ 279.594280][ T8210] tomoyo_realpath_from_path+0x58d/0x5d0 [ 279.594322][ T8210] ? tomoyo_path_number_perm+0x219/0x630 [ 279.594348][ T8210] tomoyo_path_number_perm+0x246/0x630 [ 279.594378][ T8210] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 279.594404][ T8210] ? __lock_acquire+0x6b5/0x2cf0 [ 279.594471][ T8210] ? __fget_files+0x2a/0x420 [ 279.594503][ T8210] ? __fget_files+0x3a0/0x420 [ 279.594528][ T8210] ? __fget_files+0x2a/0x420 [ 279.594559][ T8210] security_file_ioctl_compat+0xc3/0x2a0 [ 279.594599][ T8210] __ia32_compat_sys_ioctl+0x139/0x950 [ 279.594639][ T8210] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 279.594677][ T8210] ? __fget_files+0x3a0/0x420 [ 279.594711][ T8210] ? fput+0xa0/0xd0 [ 279.594737][ T8210] ? ksys_write+0x242/0x270 [ 279.594783][ T8210] __do_fast_syscall_32+0x229/0x6e0 [ 279.594811][ T8210] ? do_fast_syscall_32+0x33/0x70 [ 279.594837][ T8210] ? lockdep_hardirqs_on+0x7a/0x110 [ 279.594862][ T8210] ? asm_int80_emulation+0x1a/0x20 [ 279.594883][ T8210] ? do_int80_emulation+0x286/0x530 [ 279.594908][ T8210] ? trace_irq_disable+0x3b/0x140 [ 279.594947][ T8210] do_fast_syscall_32+0x33/0x70 [ 279.594975][ T8210] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 279.595006][ T8210] RIP: 0023:0xf6fff01c [ 279.595027][ T8210] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 279.595047][ T8210] RSP: 002b:00000000f53cc50c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 279.595071][ T8210] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000004040534e [ 279.595087][ T8210] RDX: 0000000080000140 RSI: 0000000000000000 RDI: 0000000000000000 [ 279.595100][ T8210] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 279.595113][ T8210] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 279.595126][ T8210] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 279.595159][ T8210] [ 279.598147][ T8210] ERROR: Out of memory at tomoyo_realpath_from_path. [ 279.860633][ T5364] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 280.025022][ T5364] usb 2-1: Using ep0 maxpacket: 32 [ 280.048751][ T5364] usb 2-1: config index 0 descriptor too short (expected 35577, got 27) [ 280.085781][ T5364] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 280.101026][ T5364] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 280.111350][ T5364] usb 2-1: config 1 has no interface number 0 [ 280.128722][ T5364] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 280.169697][ T5364] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 280.216290][ T5364] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 280.229647][ T8223] netlink: 'syz.3.775': attribute type 1 has an invalid length. [ 280.230173][ T5364] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.323212][ T5364] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found [ 280.524863][ T5364] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now attached [ 280.583483][ T8232] netlink: 'syz.3.779': attribute type 4 has an invalid length. [ 280.599240][ T24] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 280.669242][ T5726] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 280.708865][ T8231] netlink: 'syz.3.779': attribute type 4 has an invalid length. [ 280.763204][ T24] usb 5-1: config 0 has an invalid interface number: 92 but max is 0 [ 280.800410][ T24] usb 5-1: config 0 has no interface number 0 [ 280.810436][ T24] usb 5-1: config 0 interface 92 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 280.823175][ T24] usb 5-1: config 0 interface 92 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 280.839156][ T24] usb 5-1: config 0 interface 92 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 280.856692][ T5726] usb 1-1: unable to get BOS descriptor or descriptor too short [ 280.882433][ T5726] usb 1-1: config 129 has an invalid interface number: 135 but max is 0 [ 280.887306][ T24] usb 5-1: config 0 interface 92 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 280.935192][ T5726] usb 1-1: config 129 has an invalid interface number: 5 but max is 0 [ 280.941886][ T24] usb 5-1: New USB device found, idVendor=093b, idProduct=a005, bcdDevice= 9.81 [ 280.978696][ T8236] fuse: Bad value for 'fd' [ 280.986534][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 281.004198][ T5726] usb 1-1: config 129 has 2 interfaces, different from the descriptor's value: 1 [ 281.034004][ T24] usb 5-1: config 0 descriptor?? [ 281.056859][ T5726] usb 1-1: config 129 has no interface number 0 [ 281.059898][ T8227] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 281.106000][ T5726] usb 1-1: config 129 has no interface number 1 [ 281.134363][ T24] em28xx 5-1:0.92: New device @ 480 Mbps (093b:a005, interface 92, class 92) [ 281.162034][ T24] em28xx 5-1:0.92: DVB interface 92 found: bulk [ 281.184256][ T5726] usb 1-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 281.238175][ T5726] usb 1-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30 [ 281.276909][ T5726] usb 1-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37 [ 281.297151][ T5726] usb 1-1: config 129 interface 135 has no altsetting 0 [ 281.304732][ T5726] usb 1-1: config 129 interface 5 has no altsetting 0 [ 281.326991][ T5726] usb 1-1: string descriptor 0 read error: -22 [ 281.334070][ T5726] usb 1-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.00 [ 281.343591][ T5726] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 281.427400][ T5726] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 281.455743][ T5726] usb 1-1: MIDIStreaming interface descriptor not found [ 281.550414][ T5716] snd_usb_pod 2-1:1.1: line6_send_raw_message_async_part: usb_submit_urb failed (-22) [ 281.742597][ T24] em28xx 5-1:0.92: unknown em28xx chip ID (0) [ 281.755063][ T8247] netlink: 60 bytes leftover after parsing attributes in process `syz.2.781'. [ 281.773910][ T5726] usb 1-1: USB disconnect, device number 51 [ 281.941488][ T24] em28xx 5-1:0.92: reading from i2c device at 0xa0 failed (error=-5) [ 281.977904][ T24] em28xx 5-1:0.92: board has no eeprom [ 282.052067][ T24] em28xx 5-1:0.92: Identified as Plextor ConvertX PX-TV100U (card=40) [ 282.070259][ T24] em28xx 5-1:0.92: dvb set to bulk mode. [ 282.083509][ T808] em28xx 5-1:0.92: Remote control support is not available for this card. [ 282.106072][ T24] usb 5-1: USB disconnect, device number 46 [ 282.141606][ T24] em28xx 5-1:0.92: Disconnecting em28xx [ 282.159790][ T24] em28xx 5-1:0.92: Closing input extension [ 282.353227][ T24] em28xx 5-1:0.92: Freeing device [ 282.410131][ T5726] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 282.589148][ T5726] usb 4-1: Using ep0 maxpacket: 32 [ 282.606615][ T5726] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 282.633360][ T5726] usb 4-1: config 0 has no interfaces? [ 282.645295][ T5726] usb 4-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 282.655218][ T5726] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 282.670864][ T5726] usb 4-1: config 0 descriptor?? [ 282.696156][ T8262] FAULT_INJECTION: forcing a failure. [ 282.696156][ T8262] name failslab, interval 1, probability 0, space 0, times 0 [ 282.709228][ T8262] CPU: 0 UID: 0 PID: 8262 Comm: syz.4.787 Tainted: G L syzkaller #0 PREEMPT(full) [ 282.709267][ T8262] Tainted: [L]=SOFTLOCKUP [ 282.709275][ T8262] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 282.709288][ T8262] Call Trace: [ 282.709297][ T8262] [ 282.709305][ T8262] dump_stack_lvl+0xe8/0x150 [ 282.709335][ T8262] should_fail_ex+0x412/0x560 [ 282.709378][ T8262] should_failslab+0xa8/0x100 [ 282.709413][ T8262] __kmalloc_noprof+0xe8/0x760 [ 282.709443][ T8262] ? tomoyo_encode+0x28b/0x550 [ 282.709478][ T8262] tomoyo_encode+0x28b/0x550 [ 282.709512][ T8262] tomoyo_realpath_from_path+0x58d/0x5d0 [ 282.709552][ T8262] ? tomoyo_path_number_perm+0x219/0x630 [ 282.709577][ T8262] tomoyo_path_number_perm+0x246/0x630 [ 282.709604][ T8262] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 282.709627][ T8262] ? __lock_acquire+0x6b5/0x2cf0 [ 282.709691][ T8262] ? __fget_files+0x2a/0x420 [ 282.709722][ T8262] ? __fget_files+0x3a0/0x420 [ 282.709746][ T8262] ? __fget_files+0x2a/0x420 [ 282.709775][ T8262] security_file_ioctl_compat+0xc3/0x2a0 [ 282.709801][ T8262] __ia32_compat_sys_ioctl+0x139/0x950 [ 282.709838][ T8262] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 282.709876][ T8262] ? __fget_files+0x3a0/0x420 [ 282.709908][ T8262] ? fput+0xa0/0xd0 [ 282.709933][ T8262] ? ksys_write+0x242/0x270 [ 282.709977][ T8262] __do_fast_syscall_32+0x229/0x6e0 [ 282.710005][ T8262] ? do_fast_syscall_32+0x33/0x70 [ 282.710029][ T8262] ? lockdep_hardirqs_on+0x7a/0x110 [ 282.710053][ T8262] ? asm_int80_emulation+0x1a/0x20 [ 282.710074][ T8262] ? do_int80_emulation+0x286/0x530 [ 282.710098][ T8262] ? trace_irq_disable+0x3b/0x140 [ 282.710133][ T8262] do_fast_syscall_32+0x33/0x70 [ 282.710161][ T8262] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 282.710187][ T8262] RIP: 0023:0xf6fef01c [ 282.710207][ T8262] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 282.710225][ T8262] RSP: 002b:00000000f53dd50c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 282.710246][ T8262] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000004020565a [ 282.710260][ T8262] RDX: 0000000080000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 282.710273][ T8262] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 282.710284][ T8262] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 282.710296][ T8262] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 282.710328][ T8262] [ 282.710556][ T8262] ERROR: Out of memory at tomoyo_realpath_from_path. [ 282.829765][ T24] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 283.108468][ T5694] usb 2-1: USB disconnect, device number 50 [ 283.117001][ T5694] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected [ 283.129094][ T24] usb 1-1: Using ep0 maxpacket: 32 [ 283.137873][ T24] usb 1-1: config index 0 descriptor too short (expected 35577, got 27) [ 283.147028][ T24] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 283.189328][ T24] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 283.202869][ T24] usb 1-1: config 1 has no interface number 0 [ 283.216462][ T24] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 283.254452][ T24] usb 1-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 283.286602][ T24] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 283.296227][ T8266] netlink: 8 bytes leftover after parsing attributes in process `syz.4.788'. [ 283.316210][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 283.345932][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 283.382392][ T24] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found [ 283.454116][ T8268] netlink: 'syz.1.790': attribute type 4 has an invalid length. [ 283.524236][ T8271] netlink: 'syz.1.790': attribute type 4 has an invalid length. [ 283.590967][ T24] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now attached [ 283.710126][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 283.796795][ T8279] netlink: 60 bytes leftover after parsing attributes in process `syz.1.792'. [ 284.083371][ T8282] fuse: Unknown parameter '0x0000000000000004' [ 284.399161][ T5364] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 284.559238][ T5364] usb 2-1: Using ep0 maxpacket: 32 [ 284.570739][ T5364] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 284.606531][ T5364] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 284.637946][ T5364] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 284.667641][ T5364] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 284.679252][ T24] snd_usb_pod 1-1:1.1: line6_send_raw_message_async_part: usb_submit_urb failed (-22) [ 284.714557][ T5364] usb 2-1: config 0 descriptor?? [ 284.741543][ T5364] hub 2-1:0.0: USB hub found [ 284.893967][ T8289] netlink: 'syz.2.794': attribute type 4 has an invalid length. [ 284.940926][ T5364] hub 2-1:0.0: 1 port detected [ 284.950774][ T8290] netlink: 'syz.2.794': attribute type 4 has an invalid length. [ 285.225267][ T24] usb 4-1: USB disconnect, device number 38 [ 285.507200][ T8296] netlink: 4 bytes leftover after parsing attributes in process `syz.2.797'. [ 285.550748][ T8296] netlink: 104 bytes leftover after parsing attributes in process `syz.2.797'. [ 285.572409][ T8296] netlink: 104 bytes leftover after parsing attributes in process `syz.2.797'. [ 285.768705][ T5716] usb 1-1: USB disconnect, device number 52 [ 285.787178][ T5716] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected [ 285.794673][ T8285] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 285.822816][ T8285] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 285.855696][ T5694] usb 2-1: USB disconnect, device number 51 [ 285.959526][ T24] usb 3-1: new full-speed USB device number 48 using dummy_hcd [ 286.045185][ T8306] FAULT_INJECTION: forcing a failure. [ 286.045185][ T8306] name failslab, interval 1, probability 0, space 0, times 0 [ 286.058982][ T8306] CPU: 1 UID: 0 PID: 8306 Comm: syz.4.800 Tainted: G L syzkaller #0 PREEMPT(full) [ 286.059025][ T8306] Tainted: [L]=SOFTLOCKUP [ 286.059033][ T8306] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 286.059045][ T8306] Call Trace: [ 286.059064][ T8306] [ 286.059072][ T8306] dump_stack_lvl+0xe8/0x150 [ 286.059104][ T8306] should_fail_ex+0x412/0x560 [ 286.059136][ T8306] should_failslab+0xa8/0x100 [ 286.059171][ T8306] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 286.059202][ T8306] ? __alloc_skb+0x186/0x7d0 [ 286.059225][ T8306] ? __alloc_skb+0x1d0/0x7d0 [ 286.059247][ T8306] ? __local_bh_enable_ip+0xd0/0x130 [ 286.059275][ T8306] __alloc_skb+0x1d0/0x7d0 [ 286.059305][ T8306] netlink_sendmsg+0x5d4/0xb40 [ 286.059343][ T8306] ? __pfx_netlink_sendmsg+0x10/0x10 [ 286.059374][ T8306] ? aa_sock_msg_perm+0xf1/0x1b0 [ 286.059403][ T8306] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 286.059436][ T8306] ____sys_sendmsg+0x972/0x9f0 [ 286.059474][ T8306] ? __pfx_____sys_sendmsg+0x10/0x10 [ 286.059506][ T8306] ? kstrtoull+0x12f/0x1d0 [ 286.059538][ T8306] ___sys_sendmsg+0x2a5/0x360 [ 286.059564][ T8306] ? __lock_acquire+0x6b5/0x2cf0 [ 286.059592][ T8306] ? __pfx____sys_sendmsg+0x10/0x10 [ 286.059621][ T8306] ? get_pid_task+0x20/0x1f0 [ 286.059648][ T8306] ? get_pid_task+0x20/0x1f0 [ 286.059672][ T8306] ? get_pid_task+0x20/0x1f0 [ 286.059726][ T8306] ? __fget_files+0x2a/0x420 [ 286.059751][ T8306] ? __fget_files+0x3a0/0x420 [ 286.059786][ T8306] __sys_sendmsg+0x183/0x260 [ 286.059816][ T8306] ? __pfx___sys_sendmsg+0x10/0x10 [ 286.059867][ T8306] __do_fast_syscall_32+0x229/0x6e0 [ 286.059894][ T8306] ? do_fast_syscall_32+0x33/0x70 [ 286.059918][ T8306] ? lockdep_hardirqs_on+0x7a/0x110 [ 286.059941][ T8306] ? asm_int80_emulation+0x1a/0x20 [ 286.059962][ T8306] ? do_int80_emulation+0x286/0x530 [ 286.059986][ T8306] ? trace_irq_disable+0x3b/0x140 [ 286.060021][ T8306] do_fast_syscall_32+0x33/0x70 [ 286.060047][ T8306] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 286.060081][ T8306] RIP: 0023:0xf6fef01c [ 286.060101][ T8306] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 286.060120][ T8306] RSP: 002b:00000000f53dd50c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 286.060143][ T8306] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800001c0 [ 286.060158][ T8306] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 286.060171][ T8306] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 286.060183][ T8306] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 286.060195][ T8306] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 286.060226][ T8306] [ 286.361747][ T24] usb 3-1: not running at top speed; connect to a high speed hub [ 286.370822][ T24] usb 3-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x1A, changing to 0xA [ 286.385585][ T24] usb 3-1: New USB device found, idVendor=17cc, idProduct=041c, bcdDevice= 0.40 [ 286.394842][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 286.403342][ T24] usb 3-1: Product: syz [ 286.407559][ T24] usb 3-1: Manufacturer: syz [ 286.412658][ T24] usb 3-1: SerialNumber: syz [ 286.748585][ T8314] netlink: 'syz.3.802': attribute type 4 has an invalid length. [ 286.817078][ T8318] netlink: 60 bytes leftover after parsing attributes in process `syz.1.803'. [ 286.828391][ T8319] netlink: 'syz.3.802': attribute type 4 has an invalid length. [ 286.838742][ T8312] netlink: 'syz.4.801': attribute type 4 has an invalid length. [ 287.040906][ T8323] veth1_to_bridge: entered allmulticast mode [ 287.239499][ T5364] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 287.339149][ T5716] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 287.359134][ T5694] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 287.392169][ T5364] usb 1-1: unable to get BOS descriptor or descriptor too short [ 287.404682][ T5364] usb 1-1: config 129 has an invalid interface number: 135 but max is 0 [ 287.414674][ T5364] usb 1-1: config 129 has an invalid interface number: 5 but max is 0 [ 287.430218][ T8333] netlink: 8 bytes leftover after parsing attributes in process `syz.3.808'. [ 287.430394][ T5364] usb 1-1: config 129 has 2 interfaces, different from the descriptor's value: 1 [ 287.458702][ T5364] usb 1-1: config 129 has no interface number 0 [ 287.465437][ T5364] usb 1-1: config 129 has no interface number 1 [ 287.479127][ T5364] usb 1-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 287.500497][ T5364] usb 1-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30 [ 287.518497][ T5716] usb 5-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 287.530811][ T5694] usb 2-1: Using ep0 maxpacket: 32 [ 287.532660][ T5716] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 287.544477][ T5364] usb 1-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37 [ 287.561664][ T5716] usb 5-1: Product: syz [ 287.565947][ T5364] usb 1-1: config 129 interface 135 has no altsetting 0 [ 287.569990][ T5694] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 287.573753][ T5716] usb 5-1: Manufacturer: syz [ 287.587798][ T5364] usb 1-1: config 129 interface 5 has no altsetting 0 [ 287.594817][ T5716] usb 5-1: SerialNumber: syz [ 287.602522][ T5364] usb 1-1: string descriptor 0 read error: -22 [ 287.611009][ T5694] usb 2-1: config 0 has no interfaces? [ 287.611162][ T5364] usb 1-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.00 [ 287.630507][ T5716] usb 5-1: config 0 descriptor?? [ 287.635650][ T5364] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 287.646038][ T5694] usb 2-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 287.656182][ T5716] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 287.679083][ T5694] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.693249][ T5364] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 287.704993][ T5694] usb 2-1: config 0 descriptor?? [ 287.713976][ T5364] usb 1-1: MIDIStreaming interface descriptor not found [ 287.926015][ T5364] usb 1-1: USB disconnect, device number 53 [ 288.598953][ T24] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 288.720576][ T8327] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 288.757510][ T8327] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 288.780844][ T24] usb 3-1: USB disconnect, device number 48 [ 288.903671][ T5797] udevd[5797]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 289.019352][ T5716] gspca_sunplus: reg_w_riv err -110 [ 289.025011][ T5716] sunplus 5-1:0.0: probe with driver sunplus failed with error -110 [ 289.197620][ T8355] netlink: 'syz.2.814': attribute type 4 has an invalid length. [ 289.269129][ T5364] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 289.283700][ T8357] netlink: 'syz.2.814': attribute type 4 has an invalid length. [ 289.417411][ T24] usb 5-1: USB disconnect, device number 47 [ 289.430213][ T5364] usb 1-1: Using ep0 maxpacket: 32 [ 289.448981][ T5364] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 289.479532][ T5364] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 289.509148][ T5364] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 289.539131][ T5364] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 289.557947][ T5364] usb 1-1: config 0 descriptor?? [ 289.569990][ T5364] hub 1-1:0.0: USB hub found [ 289.766663][ T5364] hub 1-1:0.0: 1 port detected [ 289.790356][ T8362] netlink: 60 bytes leftover after parsing attributes in process `syz.3.816'. [ 289.939262][ T5716] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 290.109252][ T5716] usb 3-1: Using ep0 maxpacket: 32 [ 290.131206][ T5716] usb 3-1: config index 0 descriptor too short (expected 6701, got 45) [ 290.141387][ T5716] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 290.152420][ T5716] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 290.164253][ T5716] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 290.181138][ T5716] usb 3-1: config 0 interface 0 has no altsetting 0 [ 290.193958][ T24] usb 2-1: USB disconnect, device number 52 [ 290.196640][ T5716] usb 3-1: New USB device found, idVendor=046d, idProduct=ca03, bcdDevice= 0.9d [ 290.227939][ T5716] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 290.263278][ T5716] usb 3-1: config 0 descriptor?? [ 290.583023][ T8352] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 290.594953][ T8352] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 290.606866][ T43] usb 1-1: USB disconnect, device number 54 [ 290.631865][ T24] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 290.742672][ T5716] logitech 0003:046D:CA03.0016: unknown main item tag 0x0 [ 290.756241][ T5716] logitech 0003:046D:CA03.0016: unknown main item tag 0x0 [ 290.770476][ T5716] logitech 0003:046D:CA03.0016: unknown main item tag 0x0 [ 290.777861][ T5716] logitech 0003:046D:CA03.0016: unknown main item tag 0x0 [ 290.785447][ T5716] logitech 0003:046D:CA03.0016: unknown main item tag 0x0 [ 290.793119][ T5716] logitech 0003:046D:CA03.0016: unknown main item tag 0x0 [ 290.799342][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 290.801466][ T5716] logitech 0003:046D:CA03.0016: unknown main item tag 0x0 [ 290.817392][ T24] usb 2-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 290.829405][ T24] usb 2-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 290.841336][ T24] usb 2-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 290.841832][ T5716] logitech 0003:046D:CA03.0016: hidraw0: USB HID v0.00 Device [HID 046d:ca03] on usb-dummy_hcd.2-1/input0 [ 290.852619][ T24] usb 2-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 290.865004][ T5716] logitech 0003:046D:CA03.0016: no inputs found [ 290.908458][ T24] usb 2-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 290.939513][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 290.960219][ T24] usb 2-1: Product: syz [ 290.970698][ T24] usb 2-1: Manufacturer: syz [ 290.993451][ T24] usb 2-1: SerialNumber: syz [ 291.044043][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 291.125768][ T24] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:155.0/input/input36 [ 291.143857][ T8380] netlink: 8 bytes leftover after parsing attributes in process `syz.3.821'. [ 291.216605][ T5716] usb 3-1: USB disconnect, device number 49 [ 291.261583][ T8373] netlink: 4 bytes leftover after parsing attributes in process `syz.1.819'. [ 291.299080][ T24] imon 2-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 291.335766][ T24] (id 0x00) [ 291.474834][ T8389] netlink: 4 bytes leftover after parsing attributes in process `syz.0.824'. [ 291.497411][ T8389] netlink: 104 bytes leftover after parsing attributes in process `syz.0.824'. [ 291.510409][ T24] rc_core: IR keymap rc-imon-pad not found [ 291.511877][ T8389] netlink: 104 bytes leftover after parsing attributes in process `syz.0.824'. [ 291.520106][ T24] Registered IR keymap rc-empty [ 291.542836][ T24] imon 2-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 291.582846][ T24] imon 2-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 291.626071][ T24] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:155.0/rc/rc0 [ 291.660532][ T24] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:155.0/rc/rc0/input37 [ 291.702316][ T24] imon 2-1:155.0: iMON device (15c2:ffdc, intf0) on usb<2:53> initialized [ 291.859118][ T5716] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 291.909566][ T9] usb 1-1: new full-speed USB device number 55 using dummy_hcd [ 292.020069][ T5716] usb 5-1: Using ep0 maxpacket: 16 [ 292.031634][ T5716] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 292.045447][ T5716] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 292.055557][ T5716] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 292.069872][ T5716] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 292.079509][ T5716] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 292.092076][ T5716] usb 5-1: config 0 descriptor?? [ 292.101548][ T9] usb 1-1: not running at top speed; connect to a high speed hub [ 292.111134][ T9] usb 1-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x1A, changing to 0xA [ 292.137645][ T9] usb 1-1: New USB device found, idVendor=17cc, idProduct=041c, bcdDevice= 0.40 [ 292.147315][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 292.160685][ T9] usb 1-1: Product: syz [ 292.167534][ T9] usb 1-1: Manufacturer: syz [ 292.176752][ T9] usb 1-1: SerialNumber: syz [ 292.264525][ T8399] netlink: 60 bytes leftover after parsing attributes in process `syz.2.827'. [ 292.555634][ T5716] microsoft 0003:045E:07DA.0017: invalid report_size 33892 [ 292.564085][ T5716] microsoft 0003:045E:07DA.0017: item 0 2 1 7 parsing failed [ 292.572973][ T5716] microsoft 0003:045E:07DA.0017: parse failed [ 292.579744][ T5716] microsoft 0003:045E:07DA.0017: probe with driver microsoft failed with error -22 [ 292.645179][ T8405] netlink: 8 bytes leftover after parsing attributes in process `syz.3.829'. [ 292.659853][ T24] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 292.771329][ T43] usb 5-1: USB disconnect, device number 48 [ 292.821664][ T24] usb 3-1: unable to get BOS descriptor or descriptor too short [ 292.836033][ T24] usb 3-1: config 129 has an invalid interface number: 135 but max is 0 [ 292.845393][ T24] usb 3-1: config 129 has an invalid interface number: 5 but max is 0 [ 292.855739][ T24] usb 3-1: config 129 has 2 interfaces, different from the descriptor's value: 1 [ 292.865505][ T24] usb 3-1: config 129 has no interface number 0 [ 292.871942][ T24] usb 3-1: config 129 has no interface number 1 [ 292.878693][ T24] usb 3-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 292.892624][ T24] usb 3-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30 [ 292.903826][ T24] usb 3-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37 [ 292.921172][ T24] usb 3-1: config 129 interface 135 has no altsetting 0 [ 292.928291][ T24] usb 3-1: config 129 interface 5 has no altsetting 0 [ 292.940113][ T24] usb 3-1: string descriptor 0 read error: -22 [ 292.946714][ T24] usb 3-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.00 [ 292.956578][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 292.983130][ T24] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 292.990658][ T24] usb 3-1: MIDIStreaming interface descriptor not found [ 293.213907][ T24] usb 3-1: USB disconnect, device number 50 [ 293.464571][ T5716] usb 2-1: USB disconnect, device number 53 [ 293.744946][ T5364] bridge0: entered promiscuous mode [ 293.823255][ T8416] "syz.3.832" (8416) uses obsolete ecb(arc4) skcipher [ 293.938037][ T8419] netlink: 'syz.1.833': attribute type 12 has an invalid length. [ 294.209136][ T24] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 294.266331][ T29] kauditd_printk_skb: 45 callbacks suppressed [ 294.266352][ T29] audit: type=1326 audit(1777368261.061:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8421 comm="syz.3.835" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f0301c code=0x7ffc0000 [ 294.301120][ T29] audit: type=1326 audit(1777368261.091:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8421 comm="syz.3.835" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f0301c code=0x7ffc0000 [ 294.331072][ T29] audit: type=1326 audit(1777368261.091:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8421 comm="syz.3.835" exe="/root/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf7f0301c code=0x7ffc0000 [ 294.356067][ T29] audit: type=1326 audit(1777368261.091:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8421 comm="syz.3.835" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f0301c code=0x7ffc0000 [ 294.379684][ T43] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 294.388281][ T24] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 294.397723][ T24] usb 2-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 294.413292][ T24] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 294.424270][ T24] usb 2-1: config 220 has no interface number 2 [ 294.431069][ T24] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 294.445176][ T24] usb 2-1: config 220 interface 0 has no altsetting 0 [ 294.452586][ T24] usb 2-1: config 220 interface 76 has no altsetting 0 [ 294.461133][ T24] usb 2-1: config 220 interface 1 has no altsetting 0 [ 294.468486][ T8431] netlink: 60 bytes leftover after parsing attributes in process `syz.4.838'. [ 294.473192][ T29] audit: type=1326 audit(1777368261.091:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8421 comm="syz.3.835" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f0301c code=0x7ffc0000 [ 294.514380][ T24] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 294.531673][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 294.553034][ T24] usb 2-1: Product: syz [ 294.557330][ T9] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 294.569542][ T29] audit: type=1326 audit(1777368261.101:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8421 comm="syz.3.835" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f0301c code=0x7ffc0000 [ 294.593294][ T43] usb 3-1: Using ep0 maxpacket: 32 [ 294.609488][ T24] usb 2-1: Manufacturer: syz [ 294.623170][ T43] usb 3-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 294.633100][ T24] usb 2-1: SerialNumber: syz [ 294.640545][ T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 294.657524][ T29] audit: type=1326 audit(1777368261.101:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8421 comm="syz.3.835" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f0301c code=0x7ffc0000 [ 294.682848][ T43] usb 3-1: Product: syz [ 294.691294][ T43] usb 3-1: Manufacturer: syz [ 294.699727][ T43] usb 3-1: SerialNumber: syz [ 294.730642][ T43] usb 3-1: config 0 descriptor?? [ 294.735862][ T29] audit: type=1326 audit(1777368261.121:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8421 comm="syz.3.835" exe="/root/syz-executor" sig=0 arch=40000003 syscall=9 compat=1 ip=0xf7f0301c code=0x7ffc0000 [ 294.778576][ T43] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 294.797018][ T43] dvb-usb: bulk message failed: -22 (4/0) [ 294.817814][ T29] audit: type=1326 audit(1777368261.121:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8421 comm="syz.3.835" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f0301c code=0x7ffc0000 [ 294.853574][ T43] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 294.874603][ T43] dvb-usb: bulk message failed: -22 (5/0) [ 294.887109][ T43] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 294.942291][ T29] audit: type=1326 audit(1777368261.121:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8421 comm="syz.3.835" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f0301c code=0x7ffc0000 [ 295.009099][ T43] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 295.035112][ T43] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 295.072058][ T43] usb 3-1: media controller created [ 295.088600][ T9] usb 1-1: USB disconnect, device number 55 [ 295.188654][ T43] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 295.354664][ T43] usb 3-1: selecting invalid altsetting 3 [ 295.363023][ T43] ttusb2: set interface to alts=3 failed [ 295.601948][ T43] DVB: Unable to find symbol tda10086_attach() [ 295.623751][ T43] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 295.648947][ T43] dvb-usb: bulk message failed: -22 (4/0) [ 295.671436][ T43] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 295.699151][ T9] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 295.723115][ T43] dvb-usb: bulk message failed: -22 (5/0) [ 295.738962][ T43] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 295.768173][ T43] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 295.811842][ T24] usb 2-1: selecting invalid altsetting 0 [ 295.838641][ T24] uvcvideo 2-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 295.847590][ T24] uvcvideo 2-1:220.0: No valid video chain found. [ 295.899315][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 295.946109][ T9] usb 1-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 295.971488][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 296.008402][ T9] usb 1-1: Product: syz [ 296.028351][ T24] usb 2-1: selecting invalid altsetting 0 [ 296.046051][ T9] usb 1-1: Manufacturer: syz [ 296.046086][ T24] usbtest 2-1:220.1: probe with driver usbtest failed with error -22 [ 296.076211][ T9] usb 1-1: SerialNumber: syz [ 296.119548][ T24] usb 2-1: USB disconnect, device number 54 [ 296.448679][ T9] usb 1-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 296.501273][ T9] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 296.525346][ T9] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 296.546201][ T9] usb 1-1: media controller created [ 296.634562][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 296.718976][ T9] zl10353_read_register: readreg error (reg=127, ret==-71) [ 296.911428][ T9] dvb_usb_gl861 1-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 296.952803][ T9] usb 1-1: USB disconnect, device number 56 [ 297.143104][ T8458] netlink: 'syz.1.845': attribute type 4 has an invalid length. [ 297.189517][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 297.291033][ T8465] netlink: 'syz.0.847': attribute type 1 has an invalid length. [ 297.299557][ T8466] netlink: 'syz.1.845': attribute type 4 has an invalid length. [ 297.372632][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 297.466274][ T43] usb 3-1: USB disconnect, device number 51 [ 297.490850][ T24] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 297.685198][ T43] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 297.704511][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 297.721313][ T24] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 297.731099][ T24] usb 5-1: config 179 has no interface number 0 [ 297.754722][ T24] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 297.758523][ T8474] netlink: 60 bytes leftover after parsing attributes in process `syz.3.849'. [ 297.772398][ T24] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 297.790834][ T24] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 297.807379][ T24] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 297.825154][ T24] usb 5-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 297.857528][ T24] usb 5-1: config 179 interface 65 has no altsetting 0 [ 297.866407][ T24] usb 5-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 297.909639][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 297.980089][ T24] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input38 [ 298.040192][ T9] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 298.049753][ T43] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 298.088615][ T8484] netlink: 'syz.1.852': attribute type 4 has an invalid length. [ 298.114263][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 298.145265][ T8486] netlink: 'syz.1.852': attribute type 4 has an invalid length. [ 298.212213][ T43] usb 3-1: Using ep0 maxpacket: 8 [ 298.220022][ T9] usb 1-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 298.238339][ T43] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 298.253922][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 298.264114][ T43] usb 3-1: config 179 has no interface number 0 [ 298.264230][ T8487] netlink: 20 bytes leftover after parsing attributes in process `syz.4.846'. [ 298.280463][ T43] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 298.293783][ T43] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 298.306106][ T43] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 298.307082][ T9] usb 1-1: Product: syz [ 298.322441][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 298.348415][ T43] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 298.362263][ T8461] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 298.363863][ T9] usb 1-1: Manufacturer: syz [ 298.376049][ T9] usb 1-1: SerialNumber: syz [ 298.382716][ T8461] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 298.395228][ T43] usb 3-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 298.411377][ T9] usb 1-1: config 0 descriptor?? [ 298.426818][ T8461] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 298.437911][ T9] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 298.449085][ T43] usb 3-1: config 179 interface 65 has no altsetting 0 [ 298.467083][ T8461] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 298.475196][ T43] usb 3-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 298.494803][ T43] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.508691][ T8461] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 298.553374][ T8461] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 298.564336][ T43] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input39 [ 298.658636][ T24] usb 5-1: USB disconnect, device number 49 [ 298.664797][ C1] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 298.932197][ T8470] netlink: 20 bytes leftover after parsing attributes in process `syz.2.848'. [ 298.951015][ T8470] netlink: 20 bytes leftover after parsing attributes in process `syz.2.848'. [ 298.982573][ T8470] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 299.018840][ T8470] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 299.071079][ T8470] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 299.090486][ T8470] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 299.121933][ T8492] netlink: 'syz.1.856': attribute type 1 has an invalid length. [ 299.130270][ T8470] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 299.135830][ T8470] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 299.222545][ T24] usb 3-1: USB disconnect, device number 52 [ 299.228688][ C1] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 299.422177][ T8501] syzkaller0: entered promiscuous mode [ 299.429262][ T43] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 299.442561][ T8501] FAULT_INJECTION: forcing a failure. [ 299.442561][ T8501] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 299.443007][ T8476] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 299.466976][ T8501] CPU: 0 UID: 0 PID: 8501 Comm: syz.4.859 Tainted: G L syzkaller #0 PREEMPT(full) [ 299.467011][ T8501] Tainted: [L]=SOFTLOCKUP [ 299.467018][ T8501] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 299.467031][ T8501] Call Trace: [ 299.467040][ T8501] [ 299.467049][ T8501] dump_stack_lvl+0xe8/0x150 [ 299.467083][ T8501] should_fail_ex+0x412/0x560 [ 299.467115][ T8501] _copy_from_user+0x2d/0xb0 [ 299.467145][ T8501] move_addr_to_kernel+0x7e/0x160 [ 299.467190][ T8501] get_compat_msghdr+0x3d8/0x4c0 [ 299.467222][ T8501] ? __pfx_get_compat_msghdr+0x10/0x10 [ 299.467252][ T8501] ? kstrtoull+0x12f/0x1d0 [ 299.467281][ T8501] ___sys_sendmsg+0x201/0x360 [ 299.467307][ T8501] ? __lock_acquire+0x6b5/0x2cf0 [ 299.467335][ T8501] ? __pfx____sys_sendmsg+0x10/0x10 [ 299.467364][ T8501] ? get_pid_task+0x20/0x1f0 [ 299.467391][ T8501] ? get_pid_task+0x20/0x1f0 [ 299.467415][ T8501] ? get_pid_task+0x20/0x1f0 [ 299.467468][ T8501] ? __fget_files+0x2a/0x420 [ 299.467493][ T8501] ? __fget_files+0x3a0/0x420 [ 299.467531][ T8501] __sys_sendmsg+0x183/0x260 [ 299.467561][ T8501] ? __pfx___sys_sendmsg+0x10/0x10 [ 299.467612][ T8501] __do_fast_syscall_32+0x229/0x6e0 [ 299.467640][ T8501] ? do_fast_syscall_32+0x33/0x70 [ 299.467665][ T8501] ? lockdep_hardirqs_on+0x7a/0x110 [ 299.467687][ T8501] ? asm_int80_emulation+0x1a/0x20 [ 299.467707][ T8501] ? do_int80_emulation+0x286/0x530 [ 299.467738][ T8501] do_fast_syscall_32+0x33/0x70 [ 299.467764][ T8501] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 299.467790][ T8501] RIP: 0023:0xf6fef01c [ 299.467809][ T8501] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 299.467826][ T8501] RSP: 002b:00000000f53dd50c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 299.467849][ T8501] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 00000000800000c0 [ 299.467864][ T8501] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000000 [ 299.467877][ T8501] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 299.467889][ T8501] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 299.467901][ T8501] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 299.467931][ T8501] [ 299.501339][ T8476] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 299.750053][ T9] gspca_sunplus: reg_w_riv err -110 [ 299.755463][ T9] sunplus 1-1:0.0: probe with driver sunplus failed with error -110 [ 299.789265][ T43] usb 4-1: Using ep0 maxpacket: 32 [ 299.797002][ T43] usb 4-1: config index 0 descriptor too short (expected 35577, got 27) [ 299.813637][ T43] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 299.830666][ T8499] netlink: 8 bytes leftover after parsing attributes in process `syz.1.858'. [ 299.841370][ T43] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 299.879173][ T43] usb 4-1: config 1 has no interface number 0 [ 299.893222][ T43] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 299.918059][ T43] usb 4-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 299.961403][ T43] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 299.984618][ T43] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 300.023724][ T43] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found [ 300.228621][ T43] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now attached [ 300.342573][ T9] usb 1-1: USB disconnect, device number 57 [ 300.463750][ T8512] netlink: 52 bytes leftover after parsing attributes in process `syz.4.863'. [ 300.575326][ T8515] fuse: Bad value for 'fd' [ 300.684229][ T8517] netlink: 'syz.4.864': attribute type 12 has an invalid length. [ 300.791886][ T8521] netlink: 48 bytes leftover after parsing attributes in process `syz.1.865'. [ 300.979162][ T43] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 301.161398][ T43] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 301.182796][ T43] usb 5-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 301.215309][ T43] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 301.229230][ T24] snd_usb_pod 4-1:1.1: line6_send_raw_message_async_part: usb_submit_urb failed (-22) [ 301.240013][ T43] usb 5-1: config 220 has no interface number 2 [ 301.246539][ T43] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 301.287308][ T43] usb 5-1: config 220 interface 0 has no altsetting 0 [ 301.303937][ T43] usb 5-1: config 220 interface 76 has no altsetting 0 [ 301.322000][ T43] usb 5-1: config 220 interface 1 has no altsetting 0 [ 301.343658][ T43] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 301.364164][ T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 301.389368][ T43] usb 5-1: Product: syz [ 301.402073][ T43] usb 5-1: Manufacturer: syz [ 301.417496][ T43] usb 5-1: SerialNumber: syz [ 302.201728][ T8533] syzkaller0: entered promiscuous mode [ 302.259155][ T8533] 0: reclassify loop, rule prio 0, protocol 700 [ 302.297469][ T43] usb 5-1: selecting invalid altsetting 0 [ 302.323968][ T43] uvcvideo 5-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 302.339086][ T43] uvcvideo 5-1:220.0: No valid video chain found. [ 302.368221][ T43] usb 5-1: selecting invalid altsetting 0 [ 302.390428][ T43] usbtest 5-1:220.1: probe with driver usbtest failed with error -22 [ 302.424134][ T43] usb 5-1: USB disconnect, device number 50 [ 302.653016][ T9] usb 4-1: USB disconnect, device number 39 [ 302.677744][ T9] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected [ 302.839166][ T5707] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 303.009997][ T5707] usb 3-1: Using ep0 maxpacket: 8 [ 303.037898][ T5707] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 303.080277][ T5707] usb 3-1: config 179 has no interface number 0 [ 303.094158][ T5707] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 303.118604][ T5707] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 303.140334][ T5707] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 303.162911][ T5707] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 303.182907][ T5707] usb 3-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 303.223214][ T5707] usb 3-1: config 179 interface 65 has no altsetting 0 [ 303.238856][ T5707] usb 3-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 303.262659][ T5707] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 303.348124][ T5707] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input40 [ 303.569153][ T8535] netlink: 20 bytes leftover after parsing attributes in process `syz.2.869'. [ 303.663194][ T8535] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 303.706337][ T8535] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 303.776001][ T8535] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 303.808452][ T8535] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 303.843338][ T8535] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 303.864294][ T8535] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 303.956749][ T5707] usb 3-1: USB disconnect, device number 53 [ 303.962821][ C1] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 303.989190][ T8560] netlink: 'syz.3.878': attribute type 4 has an invalid length. [ 304.124948][ T8558] netlink: 'syz.3.878': attribute type 4 has an invalid length. [ 304.134741][ T9] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 304.313725][ T9] usb 5-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 304.325250][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 304.341485][ T9] usb 5-1: Product: syz [ 304.350223][ T9] usb 5-1: Manufacturer: syz [ 304.355308][ T9] usb 5-1: SerialNumber: syz [ 304.367089][ T9] usb 5-1: config 0 descriptor?? [ 304.385788][ T9] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 304.989319][ T24] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 305.150488][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 305.158555][ T24] usb 1-1: unable to get BOS descriptor or descriptor too short [ 305.168112][ T24] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 147, changing to 7 [ 305.183522][ T24] usb 1-1: language id specifier not provided by device, defaulting to English [ 305.196837][ T24] usb 1-1: New USB device found, idVendor=0499, idProduct=1027, bcdDevice= 0.40 [ 305.206811][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 305.215035][ T24] usb 1-1: Product: syz [ 305.220548][ T24] usb 1-1: Manufacturer: Я [ 305.225234][ T24] usb 1-1: SerialNumber: syz [ 305.400145][ T8559] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 305.409531][ T8559] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 305.425495][ T9] gspca_sunplus: reg_w_riv err -71 [ 305.432518][ T9] sunplus 5-1:0.0: probe with driver sunplus failed with error -71 [ 305.445010][ T9] usb 5-1: USB disconnect, device number 51 [ 305.476012][ T24] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 305.497026][ T24] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 305.527087][ T24] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 305.536603][ T24] snd-usb-audio 1-1:1.1: probe with driver snd-usb-audio failed with error -2 [ 305.554641][ T24] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 305.599419][ T24] snd-usb-audio 1-1:1.2: probe with driver snd-usb-audio failed with error -2 [ 305.614744][ T24] usb 1-1: USB disconnect, device number 58 [ 305.646037][ T5796] udevd[5796]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 306.018565][ T8594] netlink: 'syz.2.890': attribute type 4 has an invalid length. [ 306.143484][ T8594] netlink: 'syz.2.890': attribute type 4 has an invalid length. [ 306.185292][ T8599] FAULT_INJECTION: forcing a failure. [ 306.185292][ T8599] name failslab, interval 1, probability 0, space 0, times 0 [ 306.231821][ T8599] CPU: 1 UID: 0 PID: 8599 Comm: syz.4.892 Tainted: G L syzkaller #0 PREEMPT(full) [ 306.231857][ T8599] Tainted: [L]=SOFTLOCKUP [ 306.231865][ T8599] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 306.231878][ T8599] Call Trace: [ 306.231886][ T8599] [ 306.231895][ T8599] dump_stack_lvl+0xe8/0x150 [ 306.231926][ T8599] should_fail_ex+0x412/0x560 [ 306.231959][ T8599] should_failslab+0xa8/0x100 [ 306.231994][ T8599] __kmalloc_noprof+0xe8/0x760 [ 306.232024][ T8599] ? tomoyo_encode+0x28b/0x550 [ 306.232059][ T8599] tomoyo_encode+0x28b/0x550 [ 306.232092][ T8599] tomoyo_realpath_from_path+0x58d/0x5d0 [ 306.232134][ T8599] ? tomoyo_path_number_perm+0x219/0x630 [ 306.232159][ T8599] tomoyo_path_number_perm+0x246/0x630 [ 306.232186][ T8599] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 306.232210][ T8599] ? __lock_acquire+0x6b5/0x2cf0 [ 306.232273][ T8599] ? __fget_files+0x2a/0x420 [ 306.232304][ T8599] ? __fget_files+0x3a0/0x420 [ 306.232328][ T8599] ? __fget_files+0x2a/0x420 [ 306.232358][ T8599] security_file_ioctl_compat+0xc3/0x2a0 [ 306.232384][ T8599] __ia32_compat_sys_ioctl+0x139/0x950 [ 306.232421][ T8599] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 306.232457][ T8599] ? __fget_files+0x3a0/0x420 [ 306.232490][ T8599] ? fput+0xa0/0xd0 [ 306.232523][ T8599] ? ksys_write+0x242/0x270 [ 306.232567][ T8599] __do_fast_syscall_32+0x229/0x6e0 [ 306.232595][ T8599] ? do_fast_syscall_32+0x33/0x70 [ 306.232619][ T8599] ? lockdep_hardirqs_on+0x7a/0x110 [ 306.232642][ T8599] ? asm_int80_emulation+0x1a/0x20 [ 306.232662][ T8599] ? do_int80_emulation+0x286/0x530 [ 306.232686][ T8599] ? trace_irq_disable+0x3b/0x140 [ 306.232722][ T8599] do_fast_syscall_32+0x33/0x70 [ 306.232753][ T8599] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 306.232779][ T8599] RIP: 0023:0xf6fef01c [ 306.232800][ T8599] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 306.232817][ T8599] RSP: 002b:00000000f53dd50c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 306.232841][ T8599] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080086601 [ 306.232856][ T8599] RDX: 0000000080000080 RSI: 0000000000000000 RDI: 0000000000000000 [ 306.232869][ T8599] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 306.232881][ T8599] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 306.232894][ T8599] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 306.232926][ T8599] [ 306.235310][ T8599] ERROR: Out of memory at tomoyo_realpath_from_path. [ 306.534982][ T8593] syzkaller0: entered promiscuous mode [ 306.576573][ T8593] syzkaller0: entered allmulticast mode [ 306.649163][ T5707] usb 4-1: new full-speed USB device number 40 using dummy_hcd [ 306.823684][ T5707] usb 4-1: config 0 has an invalid interface number: 104 but max is 1 [ 306.858496][ T5707] usb 4-1: config 0 has an invalid interface number: 104 but max is 1 [ 306.898735][ T5707] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 306.926188][ T5707] usb 4-1: config 0 has no interface number 0 [ 306.944152][ T5707] usb 4-1: config 0 interface 104 altsetting 0 endpoint 0xF has invalid maxpacket 184, setting to 64 [ 306.975879][ T5707] usb 4-1: config 0 interface 104 has no altsetting 1 [ 307.000548][ T5707] usb 4-1: New USB device found, idVendor=1189, idProduct=0893, bcdDevice= 0.00 [ 307.020124][ T5707] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 307.049829][ T5707] usb 4-1: Product: syz [ 307.063390][ T5707] usb 4-1: Manufacturer: syz [ 307.081197][ T5707] usb 4-1: SerialNumber: syz [ 307.108243][ T5707] usb 4-1: config 0 descriptor?? [ 307.132523][ T5707] asix 4-1:0.104: probe with driver asix failed with error -22 [ 307.281947][ T9] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 307.449114][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 307.455305][ T8618] netlink: 8 bytes leftover after parsing attributes in process `syz.4.899'. [ 307.473050][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 307.515368][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 307.575215][ T9] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 307.604777][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 307.614150][ T24] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 307.640699][ T9] usb 3-1: config 0 descriptor?? [ 307.665945][ T9] hub 3-1:0.0: USB hub found [ 307.717443][ T8593] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 307.744507][ T24] hid-generic 0000:0000:0000.0018: hidraw0: HID v0.00 Device [syz1] on syz0 [ 307.760131][ T8593] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 307.867881][ T9] hub 3-1:0.0: 1 port detected [ 307.918694][ T24] usb 4-1: USB disconnect, device number 40 [ 307.977277][ T8620] fido_id[8620]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 308.132104][ T8622] fuse: Bad value for 'fd' [ 308.696018][ T8611] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 308.721108][ T8611] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 308.747519][ T5364] usb 3-1: USB disconnect, device number 54 [ 309.289426][ T5364] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 309.483902][ T5364] usb 1-1: unable to get BOS descriptor or descriptor too short [ 309.504252][ T5364] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 309.564925][ T5364] usb 1-1: New USB device found, idVendor=0b05, idProduct=1743, bcdDevice= 0.40 [ 309.574640][ T5364] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 309.583246][ T5364] usb 1-1: Product: ⫡ⷞ潗芨혫졫걮칭ꐬገ丕킴洞톍・쒊駅灈ﷸꨛὝ뛘잽 [ 309.594172][ T5364] usb 1-1: Manufacturer: ႀ쒻鶴瓠ℷ리蟎龅菊菺跞螻溍ꣷ뒋쾤䶤ᝬ難ᰬ᫗巜霎ንἢ᫺専噘韖篡犛丘㺚㟴坋ᔷशఓࣴ퓩ᦖ㟩灮⏙㞇遨粢㓲䡬乽貤㣢ꯡ㝨쌆瘾䤑ㆀ㩍鏤鍞泊撼䃴떉篺ዀ꾝箈딘슣쏂盹螋䠩䈺좽頫駥덗陴樀秌淏茁俞ᙃ薏퉝ኧ觙喪냀謇甒⥬ [ 309.628958][ T5364] usb 1-1: SerialNumber: syz [ 309.978565][ T8628] netlink: 2028 bytes leftover after parsing attributes in process `syz.0.901'. [ 309.990605][ T8628] netlink: 24 bytes leftover after parsing attributes in process `syz.0.901'. [ 311.676951][ T8634] fuse: Unknown parameter 'user_id00000000000000000000' [ 311.726214][ T8636] FAULT_INJECTION: forcing a failure. [ 311.726214][ T8636] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 311.740552][ T8636] CPU: 1 UID: 0 PID: 8636 Comm: syz.4.904 Tainted: G L syzkaller #0 PREEMPT(full) [ 311.740586][ T8636] Tainted: [L]=SOFTLOCKUP [ 311.740594][ T8636] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 311.740607][ T8636] Call Trace: [ 311.740616][ T8636] [ 311.740625][ T8636] dump_stack_lvl+0xe8/0x150 [ 311.740656][ T8636] should_fail_ex+0x412/0x560 [ 311.740689][ T8636] _copy_from_iter+0x1d3/0x1670 [ 311.740717][ T8636] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 311.740755][ T8636] ? __pfx_policy_nodemask+0x10/0x10 [ 311.740793][ T8636] ? __pfx__copy_from_iter+0x10/0x10 [ 311.740824][ T8636] ? alloc_pages_mpol+0x3c0/0x490 [ 311.740865][ T8636] copy_page_from_iter+0x220/0x2d0 [ 311.740904][ T8636] tun_get_user+0x1bf7/0x43e0 [ 311.740940][ T8636] ? tun_get_user+0x8aa/0x43e0 [ 311.741009][ T8636] ? aa_file_perm+0x50e/0x15e0 [ 311.741040][ T8636] ? __pfx_tun_get_user+0x10/0x10 [ 311.741068][ T8636] ? __lock_acquire+0x6b5/0x2cf0 [ 311.741113][ T8636] ? ref_tracker_alloc+0x35c/0x4c0 [ 311.741144][ T8636] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 311.741175][ T8636] ? tun_get+0x1c/0x2f0 [ 311.741200][ T8636] ? tun_get+0x1c/0x2f0 [ 311.741231][ T8636] ? tun_get+0x1c/0x2f0 [ 311.741256][ T8636] ? tun_get+0x1c/0x2f0 [ 311.741284][ T8636] tun_chr_write_iter+0x113/0x200 [ 311.741312][ T8636] vfs_write+0x61d/0xb90 [ 311.741351][ T8636] ? __pfx_vfs_write+0x10/0x10 [ 311.741392][ T8636] ? __fget_files+0x2a/0x420 [ 311.741427][ T8636] ksys_write+0x150/0x270 [ 311.741459][ T8636] ? __pfx_ksys_write+0x10/0x10 [ 311.741494][ T8636] ? asm_int80_emulation+0x1a/0x20 [ 311.741522][ T8636] do_int80_emulation+0x181/0x530 [ 311.741548][ T8636] ? trace_irq_disable+0x3b/0x140 [ 311.741578][ T8636] ? asm_int80_emulation+0x1a/0x20 [ 311.741597][ T8636] ? clear_bhb_loop+0x40/0x90 [ 311.741618][ T8636] ? clear_bhb_loop+0x40/0x90 [ 311.741645][ T8636] asm_int80_emulation+0x1a/0x20 [ 311.741665][ T8636] RIP: 0023:0xf712616b [ 311.741685][ T8636] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 311.741704][ T8636] RSP: 002b:00000000f53dd44c EFLAGS: 00000246 ORIG_RAX: 0000000000000004 [ 311.741727][ T8636] RAX: ffffffffffffffda RBX: 00000000000000c8 RCX: 0000000080001480 [ 311.741742][ T8636] RDX: 0000000000000016 RSI: 0000000000000000 RDI: 0000000000000000 [ 311.741754][ T8636] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 311.741766][ T8636] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 311.741779][ T8636] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 311.741809][ T8636] [ 312.096730][ T8643] netlink: 'syz.3.905': attribute type 1 has an invalid length. [ 312.172358][ T8646] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 312.185208][ T8648] netlink: 'syz.4.906': attribute type 4 has an invalid length. [ 312.296241][ T8651] netlink: 'syz.4.906': attribute type 4 has an invalid length. [ 312.429748][ T10] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 312.522513][ T5364] usb 1-1: unit 4 not found! [ 312.590179][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 312.606175][ T10] usb 3-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 312.628302][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 312.651388][ T8658] input: syz1 as /devices/virtual/input/input41 [ 312.664302][ T10] usb 3-1: config 0 descriptor?? [ 312.685561][ T10] gspca_main: sunplus-2.14.0 probing 041e:400b [ 312.703920][ T8659] FAULT_INJECTION: forcing a failure. [ 312.703920][ T8659] name failslab, interval 1, probability 0, space 0, times 0 [ 312.726690][ T5364] usb 1-1: USB disconnect, device number 59 [ 312.746836][ T8659] CPU: 0 UID: 0 PID: 8659 Comm: syz.1.910 Tainted: G L syzkaller #0 PREEMPT(full) [ 312.746871][ T8659] Tainted: [L]=SOFTLOCKUP [ 312.746879][ T8659] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 312.746892][ T8659] Call Trace: [ 312.746900][ T8659] [ 312.746908][ T8659] dump_stack_lvl+0xe8/0x150 [ 312.746942][ T8659] should_fail_ex+0x412/0x560 [ 312.746976][ T8659] should_failslab+0xa8/0x100 [ 312.747139][ T8659] __kmalloc_noprof+0xe8/0x760 [ 312.747181][ T8659] ? __pfx___mutex_lock+0x10/0x10 [ 312.747208][ T8659] ? kobject_get_path+0xc5/0x2f0 [ 312.747232][ T8659] ? rcu_is_watching+0x15/0xb0 [ 312.747265][ T8659] kobject_get_path+0xc5/0x2f0 [ 312.747298][ T8659] input_devices_seq_show+0x38/0x640 [ 312.747339][ T8659] seq_read_iter+0x4ef/0xe10 [ 312.747411][ T8659] seq_read+0x367/0x480 [ 312.747453][ T8659] ? __pfx_seq_read+0x10/0x10 [ 312.747496][ T8659] ? apparmor_file_permission+0x1f4/0x300 [ 312.747527][ T8659] ? __pfx_seq_read+0x10/0x10 [ 312.747557][ T8659] proc_reg_read+0x1e9/0x2e0 [ 312.747590][ T8659] ? __pfx_proc_reg_read+0x10/0x10 [ 312.747620][ T8659] vfs_read+0x20c/0xa70 [ 312.747658][ T8659] ? __pfx___mutex_lock+0x10/0x10 [ 312.747684][ T8659] ? __pfx_vfs_read+0x10/0x10 [ 312.747716][ T8659] ? __fget_files+0x2a/0x420 [ 312.747747][ T8659] ? __fget_files+0x3a0/0x420 [ 312.747771][ T8659] ? __fget_files+0x2a/0x420 [ 312.747808][ T8659] ksys_read+0x150/0x270 [ 312.747954][ T8659] ? __pfx_ksys_read+0x10/0x10 [ 312.747995][ T8659] __do_fast_syscall_32+0x229/0x6e0 [ 312.748029][ T8659] ? do_fast_syscall_32+0x33/0x70 [ 312.748054][ T8659] ? lockdep_hardirqs_on+0x7a/0x110 [ 312.748077][ T8659] ? asm_int80_emulation+0x1a/0x20 [ 312.748098][ T8659] ? do_int80_emulation+0x286/0x530 [ 312.748122][ T8659] ? trace_irq_disable+0x3b/0x140 [ 312.748157][ T8659] do_fast_syscall_32+0x33/0x70 [ 312.748185][ T8659] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 312.748211][ T8659] RIP: 0023:0xf706f01c [ 312.748231][ T8659] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 312.748250][ T8659] RSP: 002b:00000000f543c50c EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 312.748273][ T8659] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800028c0 [ 312.748287][ T8659] RDX: 0000000000002020 RSI: 0000000000000000 RDI: 0000000000000000 [ 312.748300][ T8659] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 312.748312][ T8659] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 312.748324][ T8659] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 312.748357][ T8659] [ 313.058291][ T8661] fuse: Bad value for 'fd' [ 313.211096][ T5796] udevd[5796]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 313.519345][ T5726] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 313.651366][ T8646] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(10) [ 313.658069][ T8646] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 313.667789][ T8646] vhci_hcd vhci_hcd.0: Device attached [ 313.685828][ T8646] vhci_hcd vhci_hcd.0: port 0 already used [ 313.692544][ T5726] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 313.702081][ T5726] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 313.712924][ T8678] vhci_hcd: connection closed [ 313.713294][ T13] vhci_hcd vhci_hcd.2: stop threads [ 313.713825][ T5726] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 313.728880][ T13] vhci_hcd vhci_hcd.2: release socket [ 313.732929][ T10] gspca_sunplus: reg_r err -71 [ 313.733028][ T10] sunplus 3-1:0.0: probe with driver sunplus failed with error -71 [ 313.738824][ T10] usb 3-1: USB disconnect, device number 55 [ 313.751752][ T13] vhci_hcd vhci_hcd.2: disconnect device [ 313.770532][ T5726] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 313.796716][ T5726] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 313.809328][ T5726] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 313.817578][ T5726] usb 2-1: Product: syz [ 313.823954][ T5726] usb 2-1: Manufacturer: syz [ 313.838400][ T5726] cdc_wdm 2-1:1.0: skipping garbage [ 313.844122][ T5726] cdc_wdm 2-1:1.0: skipping garbage [ 313.855139][ T5726] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 313.861517][ T5726] cdc_wdm 2-1:1.0: Unknown control protocol [ 313.870002][ T5707] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 314.029794][ T5707] usb 4-1: Using ep0 maxpacket: 32 [ 314.040243][ T5707] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 314.052071][ T5707] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 314.061257][ T8668] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 314.070778][ T5707] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 314.078173][ T8668] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 314.090805][ T5707] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 314.102560][ T5707] usb 4-1: config 0 descriptor?? [ 314.113052][ T5707] hub 4-1:0.0: USB hub found [ 314.221359][ T5694] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 314.307597][ T8686] FAULT_INJECTION: forcing a failure. [ 314.307597][ T8686] name failslab, interval 1, probability 0, space 0, times 0 [ 314.325416][ T8686] CPU: 1 UID: 0 PID: 8686 Comm: syz.4.918 Tainted: G L syzkaller #0 PREEMPT(full) [ 314.325455][ T8686] Tainted: [L]=SOFTLOCKUP [ 314.325463][ T8686] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 314.325478][ T8686] Call Trace: [ 314.325486][ T8686] [ 314.325496][ T8686] dump_stack_lvl+0xe8/0x150 [ 314.325527][ T8686] should_fail_ex+0x412/0x560 [ 314.325561][ T8686] should_failslab+0xa8/0x100 [ 314.325606][ T8686] __kmalloc_noprof+0xe8/0x760 [ 314.325638][ T8686] ? tomoyo_encode+0x28b/0x550 [ 314.325673][ T8686] tomoyo_encode+0x28b/0x550 [ 314.325708][ T8686] tomoyo_realpath_from_path+0x58d/0x5d0 [ 314.325739][ T8686] ? tomoyo_domain+0xd7/0x130 [ 314.325775][ T8686] ? tomoyo_path_number_perm+0x219/0x630 [ 314.325801][ T8686] tomoyo_path_number_perm+0x246/0x630 [ 314.325828][ T8686] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 314.325853][ T8686] ? __lock_acquire+0x6b5/0x2cf0 [ 314.325918][ T8686] ? __fget_files+0x2a/0x420 [ 314.325949][ T8686] ? __fget_files+0x3a0/0x420 [ 314.325973][ T8686] ? __fget_files+0x2a/0x420 [ 314.326003][ T8686] security_file_ioctl_compat+0xc3/0x2a0 [ 314.326029][ T8686] __ia32_compat_sys_ioctl+0x139/0x950 [ 314.326067][ T8686] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 314.326105][ T8686] ? __fget_files+0x3a0/0x420 [ 314.326137][ T8686] ? fput+0xa0/0xd0 [ 314.326161][ T8686] ? ksys_write+0x242/0x270 [ 314.326205][ T8686] __do_fast_syscall_32+0x229/0x6e0 [ 314.326232][ T8686] ? do_fast_syscall_32+0x33/0x70 [ 314.326257][ T8686] ? lockdep_hardirqs_on+0x7a/0x110 [ 314.326280][ T8686] ? asm_int80_emulation+0x1a/0x20 [ 314.326300][ T8686] ? do_int80_emulation+0x286/0x530 [ 314.326325][ T8686] ? trace_irq_disable+0x3b/0x140 [ 314.326361][ T8686] do_fast_syscall_32+0x33/0x70 [ 314.326387][ T8686] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 314.326412][ T8686] RIP: 0023:0xf6fef01c [ 314.326432][ T8686] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 314.326451][ T8686] RSP: 002b:00000000f53dd50c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 314.326473][ T8686] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000000089f1 [ 314.326488][ T8686] RDX: 0000000080000140 RSI: 0000000000000000 RDI: 0000000000000000 [ 314.326501][ T8686] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 314.326513][ T8686] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 314.326526][ T8686] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 314.326558][ T8686] [ 314.326790][ T5707] hub 4-1:0.0: 1 port detected [ 314.343514][ T8686] ERROR: Out of memory at tomoyo_realpath_from_path. [ 314.636997][ T5694] usb 1-1: Using ep0 maxpacket: 32 [ 314.643068][ C0] cdc_wdm 2-1:1.0: Unexpected error -71 [ 314.647676][ T43] usb 2-1: USB disconnect, device number 55 [ 314.648928][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 314.661267][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 314.667683][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 314.667749][ T5694] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 314.726461][ T5694] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 314.738290][ T5694] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 314.753910][ T5694] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 314.776974][ T5694] usb 1-1: config 0 descriptor?? [ 314.815806][ T5694] hub 1-1:0.0: USB hub found [ 314.852013][ T8693] netlink: 'syz.2.919': attribute type 4 has an invalid length. [ 314.992957][ T5694] hub 1-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 315.048221][ T8690] netlink: 'syz.2.919': attribute type 4 has an invalid length. [ 315.412874][ T8677] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 315.440002][ T8677] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 315.443429][ T5694] hid-generic 0003:046D:C31C.0019: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.0-1/input0 [ 315.460682][ T5707] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 315.475190][ T10] usb 4-1: USB disconnect, device number 41 [ 315.527773][ T8702] netlink: 'syz.1.922': attribute type 3 has an invalid length. [ 315.543401][ T8702] netlink: 666 bytes leftover after parsing attributes in process `syz.1.922'. [ 315.643978][ T5707] usb 3-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 315.654080][ T5707] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 315.663022][ T5707] usb 3-1: Product: syz [ 315.667381][ T5707] usb 3-1: Manufacturer: syz [ 315.675180][ T5707] usb 3-1: SerialNumber: syz [ 315.685973][ T5707] usb 3-1: config 0 descriptor?? [ 315.696478][ T5707] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 316.031296][ T8684] usb 1-1: reset high-speed USB device number 60 using dummy_hcd [ 316.157411][ T8711] netlink: 'syz.4.923': attribute type 1 has an invalid length. [ 316.428654][ T8706] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 316.444188][ T8706] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 316.494736][ T8718] fuse: Unknown parameter '0x0000000000000003' [ 316.722357][ T8700] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 316.738131][ T8700] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 316.764840][ T5707] gspca_sunplus: reg_w_riv err -71 [ 316.773175][ T5707] sunplus 3-1:0.0: probe with driver sunplus failed with error -71 [ 316.784576][ T5707] usb 3-1: USB disconnect, device number 56 [ 316.799634][ T5803] udevd[5803]: setting mode of /dev/bus/usb/003/056 to 020664 failed: No such file or directory [ 316.811198][ T5803] udevd[5803]: setting owner of /dev/bus/usb/003/056 to uid=0, gid=0 failed: No such file or directory [ 316.985392][ T8726] netlink: 'syz.3.929': attribute type 4 has an invalid length. [ 317.055023][ T8726] netlink: 'syz.3.929': attribute type 4 has an invalid length. [ 317.259152][ T5726] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 317.380461][ T10] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 317.396503][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.407900][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.436922][ T5726] usb 5-1: unable to get BOS descriptor or descriptor too short [ 317.472552][ T5726] usb 5-1: config 129 has an invalid interface number: 135 but max is 0 [ 317.489769][ T5726] usb 5-1: config 129 has an invalid interface number: 5 but max is 0 [ 317.503322][ T5726] usb 5-1: config 129 has 2 interfaces, different from the descriptor's value: 1 [ 317.514363][ T5726] usb 5-1: config 129 has no interface number 0 [ 317.522962][ T5726] usb 5-1: config 129 has no interface number 1 [ 317.531454][ T5726] usb 5-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 317.545434][ T5726] usb 5-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30 [ 317.565837][ T5726] usb 5-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37 [ 317.579561][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 317.586039][ T5726] usb 5-1: config 129 interface 135 has no altsetting 0 [ 317.594272][ T5726] usb 5-1: config 129 interface 5 has no altsetting 0 [ 317.602338][ T10] usb 4-1: config index 0 descriptor too short (expected 35577, got 27) [ 317.611194][ T10] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 317.620224][ T10] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 317.632449][ T10] usb 4-1: config 1 has no interface number 0 [ 317.642475][ T10] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 317.654072][ T5726] usb 5-1: string descriptor 0 read error: -22 [ 317.660673][ T5726] usb 5-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.00 [ 317.671257][ T10] usb 4-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 317.684385][ T5726] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 317.692611][ T10] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 317.706857][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 317.740623][ T5686] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 317.763535][ T5726] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 317.771598][ T10] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found [ 317.778548][ T5726] usb 5-1: MIDIStreaming interface descriptor not found [ 317.925234][ T5686] usb 2-1: unable to get BOS descriptor or descriptor too short [ 317.961851][ T10] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now attached [ 317.973238][ T5686] usb 2-1: config 129 has an invalid interface number: 135 but max is 0 [ 317.995506][ T5726] usb 5-1: USB disconnect, device number 52 [ 317.999220][ T5686] usb 2-1: config 129 has an invalid interface number: 5 but max is 0 [ 318.053387][ T5686] usb 2-1: config 129 has 2 interfaces, different from the descriptor's value: 1 [ 318.097338][ T5686] usb 2-1: config 129 has no interface number 0 [ 318.116955][ T5686] usb 2-1: config 129 has no interface number 1 [ 318.131749][ T5686] usb 2-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 318.163637][ T5686] usb 2-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30 [ 318.202543][ T5686] usb 2-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37 [ 318.232012][ T5686] usb 2-1: config 129 interface 135 has no altsetting 0 [ 318.248139][ T5686] usb 2-1: config 129 interface 5 has no altsetting 0 [ 318.262253][ T5686] usb 2-1: string descriptor 0 read error: -22 [ 318.268934][ T5686] usb 2-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.00 [ 318.287994][ T5686] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 318.316594][ T5686] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 318.364752][ T5686] usb 2-1: MIDIStreaming interface descriptor not found [ 318.512997][ T8743] fuse: Unknown parameter '0x0000000000000004' [ 318.608662][ T5686] usb 2-1: USB disconnect, device number 56 [ 318.990337][ T10] snd_usb_pod 4-1:1.1: line6_send_raw_message_async_part: usb_submit_urb failed (-22) [ 319.109742][ T43] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 319.279213][ T43] usb 5-1: Using ep0 maxpacket: 8 [ 319.292772][ T43] usb 5-1: config 128 has no interfaces? [ 319.309845][ T43] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 319.319725][ T43] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 319.333546][ T43] usb 5-1: rejected 1 configuration due to insufficient available bus power [ 319.349872][ T43] usb 5-1: no configuration chosen from 1 choice [ 319.499285][ T10] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 319.669222][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 319.677976][ T10] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 319.687398][ T10] usb 2-1: config 179 has no interface number 0 [ 319.694185][ T10] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 319.705661][ T10] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 319.717439][ T10] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 319.728906][ T10] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 319.739523][ T10] usb 2-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 319.753039][ T10] usb 2-1: config 179 interface 65 has no altsetting 0 [ 319.760067][ T10] usb 2-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 319.769308][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 319.805208][ T10] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input42 [ 319.961984][ T8754] netlink: 4 bytes leftover after parsing attributes in process `syz.2.937'. [ 319.973095][ T8754] netlink: 132 bytes leftover after parsing attributes in process `syz.2.937'. [ 320.015101][ T8750] netlink: 20 bytes leftover after parsing attributes in process `syz.1.935'. [ 320.039142][ T8750] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 320.067043][ T8750] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 320.097872][ T8750] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 320.119822][ T8750] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 320.137443][ T8750] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 320.160060][ T8750] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 320.225064][ C0] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 320.241135][ T5726] usb 2-1: USB disconnect, device number 57 [ 320.265522][ T8758] gtp1: entered promiscuous mode [ 320.273563][ T8758] gtp1: entered allmulticast mode [ 320.559126][ T5707] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 320.684838][ T43] usb 4-1: USB disconnect, device number 42 [ 320.700549][ T43] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected [ 320.725216][ T5707] usb 3-1: Using ep0 maxpacket: 16 [ 320.741049][ T5707] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 320.753187][ T5707] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 320.764380][ T5707] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 320.777712][ T5707] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 320.788387][ T5707] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 320.803914][ T5707] usb 3-1: config 0 descriptor?? [ 320.826246][ T8760] netlink: 60 bytes leftover after parsing attributes in process `syz.3.940'. [ 321.077682][ T29] kauditd_printk_skb: 14 callbacks suppressed [ 321.077701][ T29] audit: type=1326 audit(1777368287.871:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8763 comm="syz.3.942" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f0301c code=0x7ffc0000 [ 321.128092][ T29] audit: type=1326 audit(1777368287.911:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8763 comm="syz.3.942" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f0301c code=0x7ffc0000 [ 321.152795][ T29] audit: type=1326 audit(1777368287.911:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8763 comm="syz.3.942" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f0301c code=0x7ffc0000 [ 321.175989][ T43] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 321.184707][ T29] audit: type=1326 audit(1777368287.911:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8763 comm="syz.3.942" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f0301c code=0x7ffc0000 [ 321.213369][ T29] audit: type=1326 audit(1777368287.911:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8763 comm="syz.3.942" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f0301c code=0x7ffc0000 [ 321.242183][ T8684] usbhid 1-1:0.0: reset_resume error -32 [ 321.257129][ T5707] microsoft 0003:045E:07DA.001A: invalid report_size 33892 [ 321.266210][ T29] audit: type=1326 audit(1777368287.911:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8763 comm="syz.3.942" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf7f0301c code=0x7ffc0000 [ 321.295002][ T5707] microsoft 0003:045E:07DA.001A: item 0 2 1 7 parsing failed [ 321.307579][ T5707] microsoft 0003:045E:07DA.001A: parse failed [ 321.336896][ T29] audit: type=1326 audit(1777368287.911:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8763 comm="syz.3.942" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f0301c code=0x7ffc0000 [ 321.360202][ T5707] microsoft 0003:045E:07DA.001A: probe with driver microsoft failed with error -22 [ 321.389884][ T43] usb 2-1: Using ep0 maxpacket: 16 [ 321.397232][ T29] audit: type=1326 audit(1777368287.911:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8763 comm="syz.3.942" exe="/root/syz-executor" sig=0 arch=40000003 syscall=297 compat=1 ip=0xf7f0301c code=0x7ffc0000 [ 321.423449][ T43] usb 2-1: unable to get BOS descriptor or descriptor too short [ 321.435691][ T29] audit: type=1326 audit(1777368287.911:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8763 comm="syz.3.942" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f0301c code=0x7ffc0000 [ 321.466329][ T43] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 321.488036][ T43] usb 2-1: config 1 interface 0 altsetting 127 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 321.510756][ T5707] usb 3-1: USB disconnect, device number 57 [ 321.539669][ T5726] usb 1-1: USB disconnect, device number 60 [ 321.548743][ T29] audit: type=1326 audit(1777368287.921:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8763 comm="syz.3.942" exe="/root/syz-executor" sig=0 arch=40000003 syscall=358 compat=1 ip=0xf7f0301c code=0x7ffc0000 [ 321.574705][ T43] usb 2-1: config 1 interface 0 has no altsetting 0 [ 321.604137][ T43] usb 2-1: New USB device found, idVendor=05ac, idProduct=0242, bcdDevice= 0.40 [ 321.616551][ T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 321.651507][ T43] usb 2-1: Product: syz [ 321.661205][ T43] usb 2-1: Manufacturer: syz [ 321.669635][ T43] usb 2-1: SerialNumber: syz [ 321.732611][ T8769] fuse: Unknown parameter '0x0000000000000003' [ 321.871833][ T5707] usb 5-1: USB disconnect, device number 53 [ 321.905684][ T43] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input43 [ 324.179138][ T5726] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 324.209788][ T5707] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 324.339201][ T10] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 324.349382][ T5726] usb 4-1: Using ep0 maxpacket: 8 [ 324.356377][ T5726] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 324.368266][ T5726] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 324.381557][ T5726] usb 4-1: New USB device found, idVendor=04b4, idProduct=de61, bcdDevice= 0.00 [ 324.391241][ T5726] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 324.400837][ T5707] usb 3-1: unable to get BOS descriptor or descriptor too short [ 324.411117][ T5707] usb 3-1: config 129 has an invalid interface number: 135 but max is 0 [ 324.415435][ T5726] usb 4-1: config 0 descriptor?? [ 324.421008][ T5707] usb 3-1: config 129 has an invalid interface number: 5 but max is 0 [ 324.433415][ T5707] usb 3-1: config 129 has 2 interfaces, different from the descriptor's value: 1 [ 324.444032][ T5707] usb 3-1: config 129 has no interface number 0 [ 324.451153][ T5707] usb 3-1: config 129 has no interface number 1 [ 324.457833][ T5707] usb 3-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 324.472439][ T5707] usb 3-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30 [ 324.484320][ T5707] usb 3-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37 [ 324.499255][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 324.504797][ T5707] usb 3-1: config 129 interface 135 has no altsetting 0 [ 324.515017][ T5707] usb 3-1: config 129 interface 5 has no altsetting 0 [ 324.523842][ T10] usb 5-1: config 1 interface 0 altsetting 8 bulk endpoint 0x82 has invalid maxpacket 64 [ 324.535523][ T10] usb 5-1: config 1 interface 0 altsetting 8 bulk endpoint 0x3 has invalid maxpacket 16 [ 324.545984][ T10] usb 5-1: config 1 interface 0 has no altsetting 0 [ 324.549223][ T5707] usb 3-1: string descriptor 0 read error: -22 [ 324.561025][ T10] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 324.561892][ T5707] usb 3-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.00 [ 324.572264][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 324.582201][ T5707] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 324.590363][ T10] usb 5-1: Product: syz [ 324.601035][ T10] usb 5-1: Manufacturer: syz [ 324.605943][ T10] usb 5-1: SerialNumber: syz [ 324.627267][ T5707] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 324.637876][ T5707] usb 3-1: MIDIStreaming interface descriptor not found [ 324.652803][ T8790] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 324.665893][ T8790] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 324.882838][ T5707] usb 3-1: USB disconnect, device number 58 [ 325.188503][ T10] usb 5-1: No union descriptors [ 325.227444][ T10] usb 5-1: USB disconnect, device number 54 [ 325.239895][ T8803] netlink: 60 bytes leftover after parsing attributes in process `syz.0.952'. [ 325.737826][ T8809] fuse: Unknown parameter '0x0000000000000003' [ 325.817243][ T8811] netlink: 'syz.2.955': attribute type 3 has an invalid length. [ 325.830110][ T8811] netlink: 666 bytes leftover after parsing attributes in process `syz.2.955'. [ 326.100636][ T8817] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 326.369758][ T5707] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 326.529887][ T5707] usb 5-1: Using ep0 maxpacket: 32 [ 326.538263][ T5707] usb 5-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 326.550539][ T5707] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 326.566322][ T5707] usb 5-1: config 0 descriptor?? [ 326.583692][ T5707] gspca_main: sunplus-2.14.0 probing 041e:400b [ 326.878752][ T5726] usbhid 4-1:0.0: can't add hid device: -71 [ 326.885461][ T5726] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 326.917658][ T5726] usb 4-1: USB disconnect, device number 43 [ 327.415332][ T8817] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(10) [ 327.422372][ T8817] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 327.443055][ T8817] vhci_hcd vhci_hcd.0: Device attached [ 327.475558][ T8817] vhci_hcd vhci_hcd.0: port 0 already used [ 327.494982][ T8834] vhci_hcd: connection closed [ 327.495404][ T3317] vhci_hcd vhci_hcd.4: stop threads [ 327.511998][ T5707] gspca_sunplus: reg_r err -71 [ 327.519859][ T3317] vhci_hcd vhci_hcd.4: release socket [ 327.525562][ T5707] sunplus 5-1:0.0: probe with driver sunplus failed with error -71 [ 327.536257][ T3317] vhci_hcd vhci_hcd.4: disconnect device [ 327.565446][ T5707] usb 5-1: USB disconnect, device number 55 [ 327.711806][ T4981] bcm5974 2-1:1.0: could not read from device [ 327.732845][ T4981] bcm5974 2-1:1.0: could not read from device [ 327.754693][ T43] bcm5974 2-1:1.0: could not read from device [ 327.792521][ T43] input: failed to attach handler mousedev to device input43, error: -5 [ 327.853476][ T4981] bcm5974 2-1:1.0: could not read from device [ 327.863959][ T43] usb 2-1: USB disconnect, device number 58 [ 327.908922][ T4981] bcm5974 2-1:1.0: could not read from device [ 328.072592][ T8843] netlink: 60 bytes leftover after parsing attributes in process `syz.1.963'. [ 328.599361][ T5726] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 328.617012][ T8849] netlink: 8 bytes leftover after parsing attributes in process `syz.1.965'. [ 328.813171][ T5726] usb 5-1: Using ep0 maxpacket: 8 [ 328.838006][ T5726] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 328.856990][ T5726] usb 5-1: config 179 has no interface number 0 [ 328.872496][ T5726] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 328.903106][ T5726] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 328.935105][ T5726] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 328.957588][ T5726] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 328.974781][ T5726] usb 5-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 329.024091][ T5726] usb 5-1: config 179 interface 65 has no altsetting 0 [ 329.045133][ T5726] usb 5-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 329.083363][ T5726] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 329.143445][ T5726] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input44 [ 329.372164][ T8846] netlink: 20 bytes leftover after parsing attributes in process `syz.4.964'. [ 329.432981][ T8846] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 329.493437][ T8846] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 329.554204][ T8846] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 329.637236][ T8846] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 329.694308][ T8846] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 329.737430][ T8846] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 329.825258][ T5726] usb 5-1: USB disconnect, device number 56 [ 329.831388][ C0] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 330.006980][ T8854] netlink: 'syz.2.967': attribute type 3 has an invalid length. [ 330.027898][ T8856] fuse: Unknown parameter '0x0000000000000003' [ 330.034879][ T8854] netlink: 666 bytes leftover after parsing attributes in process `syz.2.967'. [ 330.771018][ T43] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 330.839734][ T5694] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 330.942625][ T43] usb 1-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 330.976693][ T43] usb 1-1: config 2 interface 0 has no altsetting 0 [ 331.010734][ T43] usb 1-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 331.034927][ T43] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 331.044019][ T5694] usb 3-1: Using ep0 maxpacket: 32 [ 331.065715][ T8874] netlink: 60 bytes leftover after parsing attributes in process `syz.1.975'. [ 331.091322][ T5694] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 331.103807][ T43] usb 1-1: Product: syz [ 331.124500][ T43] usb 1-1: Manufacturer: syz [ 331.129928][ T5694] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 331.144378][ T43] usb 1-1: SerialNumber: syz [ 331.166614][ T5694] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 331.188706][ T43] usb 1-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 331.211150][ T5694] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 331.223246][ T43] usb 1-1: selecting invalid altsetting 0 [ 331.266372][ T5694] usb 3-1: config 0 descriptor?? [ 331.275517][ T43] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 331.295899][ T43] dvbdev: DVB: registering new adapter (774 Friio White ISDB-T USB2.0) [ 331.312309][ T43] usb 1-1: media controller created [ 331.334218][ T5694] hub 3-1:0.0: USB hub found [ 331.434934][ T43] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 331.501165][ T5694] hub 3-1:0.0: 1 port detected [ 331.904859][ T43] usb 1-1: USB disconnect, device number 61 [ 332.297225][ T8883] netlink: 4 bytes leftover after parsing attributes in process `syz.0.977'. [ 332.428380][ T8867] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 332.439839][ T8867] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 332.456653][ T10] usb 3-1: USB disconnect, device number 59 [ 332.733256][ T8886] netlink: 'syz.0.978': attribute type 4 has an invalid length. [ 332.868008][ T8889] netlink: 'syz.0.978': attribute type 4 has an invalid length. [ 333.949386][ T10] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 334.139226][ T5364] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 334.147024][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 334.162886][ T10] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 334.185159][ T10] usb 4-1: config 179 has no interface number 0 [ 334.201782][ T10] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 334.226665][ T10] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 334.248453][ T10] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 334.272453][ T10] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 334.289799][ T5694] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 334.293470][ T10] usb 4-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 334.324429][ T10] usb 4-1: config 179 interface 65 has no altsetting 0 [ 334.335430][ T5364] usb 1-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 334.353180][ T10] usb 4-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 334.377231][ T5364] usb 1-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 334.389091][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 334.399932][ T5364] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 334.421606][ T5364] usb 1-1: Product: syz [ 334.434914][ T5364] usb 1-1: Manufacturer: syz [ 334.450202][ T10] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input45 [ 334.464405][ T5364] usb 1-1: SerialNumber: syz [ 334.480911][ T5694] usb 2-1: Using ep0 maxpacket: 8 [ 334.501800][ T5694] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 334.519862][ T5694] usb 2-1: config 179 has no interface number 0 [ 334.521585][ T5364] usb 1-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 334.581308][ T5694] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 334.613121][ T5694] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 334.676824][ T5694] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 334.726563][ T5364] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 334.747020][ T5364] dvbdev: DVB: registering new adapter (774 Friio White ISDB-T USB2.0) [ 334.756915][ T5364] usb 1-1: media controller created [ 334.768020][ T5694] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 334.812938][ T5694] usb 2-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 334.858239][ T8908] netlink: 20 bytes leftover after parsing attributes in process `syz.3.982'. [ 334.870384][ T5694] usb 2-1: config 179 interface 65 has no altsetting 0 [ 334.882505][ T5694] usb 2-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 334.904583][ T5364] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 334.904907][ T5694] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 334.960933][ T8909] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 335.016834][ T8909] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 335.027038][ T5694] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input46 [ 335.177925][ T8900] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 335.231150][ T8900] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 335.278606][ T8906] netlink: 20 bytes leftover after parsing attributes in process `syz.1.984'. [ 335.320612][ T8900] ------------[ cut here ]------------ [ 335.326555][ T8900] usb 1-1: BOGUS control dir, pipe 80003e80 doesn't match bRequestType c0 [ 335.335919][ T8900] WARNING: drivers/usb/core/urb.c:413 at usb_submit_urb+0x1053/0x18b0, CPU#1: syz.3.982/8900 [ 335.347018][ T8900] Modules linked in: [ 335.351974][ T8900] CPU: 1 UID: 0 PID: 8900 Comm: syz.3.982 Tainted: G L syzkaller #0 PREEMPT(full) [ 335.363578][ T8900] Tainted: [L]=SOFTLOCKUP [ 335.368019][ T8900] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 335.378825][ T8900] RIP: 0010:usb_submit_urb+0x1115/0x18b0 [ 335.385216][ T8900] Code: 00 00 00 00 00 fc ff df 0f b6 44 05 00 84 c0 0f 85 91 05 00 00 45 0f b6 45 00 48 8b 7c 24 18 48 8b 74 24 10 4c 89 fa 44 89 f1 <67> 48 0f b9 3a 49 bf 00 00 00 00 00 fc ff df e9 c1 f2 ff ff 89 e9 [ 335.405872][ T8900] RSP: 0018:ffffc9000de776e8 EFLAGS: 00010246 [ 335.412916][ T8900] RAX: 0000000000000000 RBX: ffff88802b4a1800 RCX: 0000000080003e80 [ 335.421614][ T8900] RDX: ffff888054d1cc00 RSI: ffffffff8c8083a0 RDI: ffffffff903df870 [ 335.430411][ T8900] RBP: 1ffff1100fa7a550 R08: 00000000000000c0 R09: 0000000000000000 [ 335.438485][ T8900] R10: ffffc9000de777e0 R11: fffff52001bcef08 R12: ffff88807e664100 [ 335.447789][ T8900] R13: ffff88807d3d2a80 R14: 0000000080003e80 R15: ffff888054d1cc00 [ 335.456332][ T8900] FS: 0000000000000000(0000) GS:ffff888125393000(0063) knlGS:00000000f53c6b40 [ 335.466290][ T8900] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 335.473055][ T8900] CR2: 0000000034804ff8 CR3: 0000000053142000 CR4: 00000000003526f0 [ 335.481872][ T8900] Call Trace: [ 335.485264][ T8900] [ 335.488320][ T8900] ? __init_swait_queue_head+0xa9/0x150 [ 335.494234][ T8900] usb_start_wait_urb+0x13f/0x5b0 [ 335.499397][ T8900] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 335.505053][ T8900] usb_control_msg+0x234/0x3e0 [ 335.509990][ T8900] gl861_ctrl_msg+0x207/0x420 [ 335.514787][ T8900] ? __pfx_gl861_ctrl_msg+0x10/0x10 [ 335.521340][ T8900] gl861_i2c_master_xfer+0x439/0x6a0 [ 335.526760][ T8900] __i2c_transfer+0x79a/0x1f70 [ 335.532295][ T8900] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 335.538222][ T8900] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 335.544857][ T8900] ? i2c_transfer+0xc8/0x2d0 [ 335.550184][ T8900] i2c_transfer+0x1cc/0x2d0 [ 335.554813][ T8900] i2cdev_ioctl_rdwr+0x460/0x740 [ 335.560534][ T8900] compat_i2cdev_ioctl+0x59f/0x5c0 [ 335.564009][ T8912] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 335.565792][ T8900] ? __pfx_compat_i2cdev_ioctl+0x10/0x10 [ 335.581360][ T8900] ? __fget_files+0x3a0/0x420 [ 335.586166][ T8900] ? __fget_files+0x2a/0x420 [ 335.591586][ T8900] ? bpf_lsm_file_ioctl_compat+0x9/0x20 [ 335.597292][ T8900] __ia32_compat_sys_ioctl+0x5ea/0x950 [ 335.603576][ T8900] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 335.610359][ T8900] ? kmem_cache_free+0x182/0x650 [ 335.615423][ T8900] ? __se_sys_futex_time32+0x3ab/0x440 [ 335.621636][ T8900] ? rcu_is_watching+0x15/0xb0 [ 335.626541][ T8900] __do_fast_syscall_32+0x229/0x6e0 [ 335.632524][ T8900] ? do_fast_syscall_32+0x33/0x70 [ 335.637676][ T8900] ? lockdep_hardirqs_on+0x7a/0x110 [ 335.643625][ T8900] ? asm_int80_emulation+0x1a/0x20 [ 335.648866][ T8900] ? do_int80_emulation+0x286/0x530 [ 335.651634][ T8912] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 335.655985][ T8900] ? trace_irq_disable+0x3b/0x140 [ 335.667611][ T8900] do_fast_syscall_32+0x33/0x70 [ 335.673200][ T8900] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 335.680298][ T8900] RIP: 0023:0xf7f0301c [ 335.684466][ T8900] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 335.705326][ T8908] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 335.715074][ T8900] RSP: 002b:00000000f53c650c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 335.723700][ T8908] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 335.732455][ T8900] RAX: ffffffffffffffda RBX: 000000000000000d RCX: 0000000000000707 [ 335.740552][ T8900] RDX: 0000000080000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 335.748617][ T8900] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 335.756728][ T8900] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 335.765697][ T8900] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 335.774471][ T8900] [ 335.777590][ T8900] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 335.784936][ T8900] CPU: 1 UID: 0 PID: 8900 Comm: syz.3.982 Tainted: G L syzkaller #0 PREEMPT(full) [ 335.795776][ T8900] Tainted: [L]=SOFTLOCKUP [ 335.800143][ T8900] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 335.810242][ T8900] Call Trace: [ 335.813556][ T8900] [ 335.816521][ T8900] vpanic+0x56c/0xa60 [ 335.820537][ T8900] ? __pfx__printk+0x10/0x10 [ 335.825167][ T8900] ? __pfx_vpanic+0x10/0x10 [ 335.829719][ T8900] ? is_bpf_text_address+0x292/0x2b0 [ 335.835089][ T8900] ? is_bpf_text_address+0x26/0x2b0 [ 335.840333][ T8900] panic+0xc5/0xd0 [ 335.844093][ T8900] ? __pfx_panic+0x10/0x10 [ 335.848589][ T8900] __warn+0x315/0x4c0 [ 335.852610][ T8900] ? usb_submit_urb+0x1053/0x18b0 [ 335.857678][ T8900] ? usb_submit_urb+0x1053/0x18b0 [ 335.862740][ T8900] __report_bug+0x29a/0x540 [ 335.867285][ T8900] ? usb_submit_urb+0x1053/0x18b0 [ 335.872434][ T8900] ? __pfx___report_bug+0x10/0x10 [ 335.877498][ T8900] ? lockdep_hardirqs_on+0x7a/0x110 [ 335.882747][ T8900] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 335.888596][ T8900] report_bug_entry+0x19a/0x290 [ 335.893481][ T8900] ? usb_submit_urb+0x1115/0x18b0 [ 335.898545][ T8900] ? usb_submit_urb+0x111a/0x18b0 [ 335.903612][ T8900] handle_bug+0xce/0x200 [ 335.907892][ T8900] exc_invalid_op+0x1a/0x50 [ 335.912445][ T8900] asm_exc_invalid_op+0x1a/0x20 [ 335.917408][ T8900] RIP: 0010:usb_submit_urb+0x1115/0x18b0 [ 335.923086][ T8900] Code: 00 00 00 00 00 fc ff df 0f b6 44 05 00 84 c0 0f 85 91 05 00 00 45 0f b6 45 00 48 8b 7c 24 18 48 8b 74 24 10 4c 89 fa 44 89 f1 <67> 48 0f b9 3a 49 bf 00 00 00 00 00 fc ff df e9 c1 f2 ff ff 89 e9 [ 335.942721][ T8900] RSP: 0018:ffffc9000de776e8 EFLAGS: 00010246 [ 335.948921][ T8900] RAX: 0000000000000000 RBX: ffff88802b4a1800 RCX: 0000000080003e80 [ 335.956928][ T8900] RDX: ffff888054d1cc00 RSI: ffffffff8c8083a0 RDI: ffffffff903df870 [ 335.964932][ T8900] RBP: 1ffff1100fa7a550 R08: 00000000000000c0 R09: 0000000000000000 [ 335.972948][ T8900] R10: ffffc9000de777e0 R11: fffff52001bcef08 R12: ffff88807e664100 [ 335.981186][ T8900] R13: ffff88807d3d2a80 R14: 0000000080003e80 R15: ffff888054d1cc00 [ 335.989211][ T8900] ? usb_submit_urb+0x10a4/0x18b0 [ 335.994771][ T8900] ? __init_swait_queue_head+0xa9/0x150 [ 336.000386][ T8900] usb_start_wait_urb+0x13f/0x5b0 [ 336.005471][ T8900] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 336.011083][ T8900] usb_control_msg+0x234/0x3e0 [ 336.015896][ T8900] gl861_ctrl_msg+0x207/0x420 [ 336.020622][ T8900] ? __pfx_gl861_ctrl_msg+0x10/0x10 [ 336.025888][ T8900] gl861_i2c_master_xfer+0x439/0x6a0 [ 336.031219][ T8900] __i2c_transfer+0x79a/0x1f70 [ 336.036034][ T8900] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 336.041879][ T8900] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 336.047746][ T8900] ? i2c_transfer+0xc8/0x2d0 [ 336.052398][ T8900] i2c_transfer+0x1cc/0x2d0 [ 336.056968][ T8900] i2cdev_ioctl_rdwr+0x460/0x740 [ 336.061968][ T8900] compat_i2cdev_ioctl+0x59f/0x5c0 [ 336.067128][ T8900] ? __pfx_compat_i2cdev_ioctl+0x10/0x10 [ 336.072808][ T8900] ? __fget_files+0x3a0/0x420 [ 336.077520][ T8900] ? __fget_files+0x2a/0x420 [ 336.082145][ T8900] ? bpf_lsm_file_ioctl_compat+0x9/0x20 [ 336.087744][ T8900] __ia32_compat_sys_ioctl+0x5ea/0x950 [ 336.093253][ T8900] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 336.099284][ T8900] ? kmem_cache_free+0x182/0x650 [ 336.104276][ T8900] ? __se_sys_futex_time32+0x3ab/0x440 [ 336.109775][ T8900] ? rcu_is_watching+0x15/0xb0 [ 336.114591][ T8900] __do_fast_syscall_32+0x229/0x6e0 [ 336.119824][ T8900] ? do_fast_syscall_32+0x33/0x70 [ 336.124879][ T8900] ? lockdep_hardirqs_on+0x7a/0x110 [ 336.130108][ T8900] ? asm_int80_emulation+0x1a/0x20 [ 336.135261][ T8900] ? do_int80_emulation+0x286/0x530 [ 336.140491][ T8900] ? trace_irq_disable+0x3b/0x140 [ 336.145567][ T8900] do_fast_syscall_32+0x33/0x70 [ 336.150458][ T8900] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 336.156866][ T8900] RIP: 0023:0xf7f0301c [ 336.160974][ T8900] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 336.180609][ T8900] RSP: 002b:00000000f53c650c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 336.189063][ T8900] RAX: ffffffffffffffda RBX: 000000000000000d RCX: 0000000000000707 [ 336.197075][ T8900] RDX: 0000000080000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 336.205082][ T8900] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 336.213118][ T8900] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 336.221220][ T8900] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 336.229244][ T8900] [ 336.232772][ T8900] Kernel Offset: disabled [ 336.237117][ T8900] Rebooting in 86400 seconds..